Doesn’t Dependabot do this as part of your GitHub workflow?
Not all software is open, and/or on GitHub
I don’t believe Dependabot is tied to GitHub. Yet.
Something I think is much needed, but will it have the critical mass to actually work? Or just another site with some of the Intel?