Security alerts on GitHub
Appears to be only for Ruby gems and Node.js packages. It's a start, though I was hoping to be able to indicate C++ library dependencies.The lack of Python requirements.txt support is a bit odd, since it's conceptually quite similar to the two supported mechanisms.