Is this dependency current, licensed, deprecated, or already carrying a CVE?
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Is this dependency current, licensed, deprecated, or already carrying a CVE?