Thank you!

Absolutely.

First, we are working on surfacing open-source security advisories over the next couple of months in Openbase.

Second, we're still figuring out ways to flag other security concerns, such as 2FA, newly appointed maintainers, suspicious activity, etc. (this is to be expected in the longer term)