Not about the alerts but generally maybe recommend the use of automated tooling. Would love to see an alert that also tells me that I should think about installing a tool like @dependabot to help keep things up to date (which often helps with vulns)
shelikavoid's profile
Tweets
@shelikavoid
@duffelhq | http://github.com/nlopes | Trying to keep up with @gabpmts 
. | ex @gocardless, @blizzard_ent
London, UK
Joined February 2010
