Ask HN: Tools for detecting security issues in dependencies of code projects?