add sandworm.dev integration

[jossef]

Sandworm is a new tool for developers to check npm packages. They are generating a report with list of issues:

Even though the webapp looks like it was statically generated, they may have an API to generate json see https://docs.sandworm.dev/#json-output (or their CLI source code to see how it fetches the data: https://github.com/sandworm-hq/sandworm-audit)

To display it in the UI you will need their logo, please put here a link to download the logo, so @jossef will convert it to the right size.