Snyk

Resolves the full dependency tree including transitives, matches it against a curated vulnerability database, and raises fix pull requests with the minimum viable upgrade path.