Scan project dependencies for known vulnerabilities, generate software bills of materials, and enforce license compliance across the software supply chain.