Sounds interesting! Is the vulnerability scanner of Gemfile based on bundler-audit[1]? Do you add other value to this part?

[1] https://github.com/rubysec/bundler-audit