Comment Comment by hassy sure, that’s a valid concern in some environments. fwiw we use Snyk.io for dependency scanning parent hassy 4 years ago
