Software Composition Analysis Mitigates Systemic Risk in the Popular NPM Repository