Audit project dependencies and lockfiles for known CVEs, malicious packages, and supply chain security vulnerabilities.
