For the past few years, GitHub has been investing heavily in tools to help open-source projects remediate security flaws via its Dependency Graph ... through our GitHub activity GitHub notes ...