snyk does exactly this. You can also integrate it with bitbucket so automatically make PRs with upgraded package versions.