For the first time last week, i received a “Security Alert Digest” email from Github.

Inside were all the dependencies of a project, gatsby-starter, that had known vulnerabilities. It listed the name of the dependency, its version, and the version i should upgrade to to be safe. Okay.