Comment by dewey

> There, we’ll be working on expanding GitHub’s security tooling, like their recently announced vulnerable dependency alerting.

You don't have to suspect, it's in the article :)