Time since last NPM vulnerability