GitHub launches new tools to say when your project’s dependencies get pwned | Dark Hacker News