GitHub launches new tools to say when your project’s dependencies get pwned
thenextweb.com