Node.js ecosystem vulnerability reporting program is coming to an end