You can use the dependency submission API to submit dependencies for projects, such as the dependencies resolved when a project is built or compiled.| GitHub Docs
You can use the dependency graph to see the packages your project depends on and the repositories that depend on it. In addition, you can see any vulnerabilities detected in its dependencies.| GitHub Docs
Dependency graph supports a variety of ecosystems.| GitHub Docs
You can allow users to identify their projects' dependencies by enabling the dependency graph.| GitHub Docs
Dependency review lets you catch insecure dependencies before you introduce them to your environment, and provides information on license, dependents, and age of dependencies.| GitHub Docs
If the dependency information reported by GitHub is not what you expected, there are a number of points to consider, and various things you can check.| GitHub Docs
If GitHub discovers insecure dependencies in your project, you can view details on the Dependabot alerts tab of your repository. Then, you can update your project to resolve or dismiss the alert.| GitHub Docs
GitHub sends Dependabot alerts when we detect that your repository uses a vulnerable dependency.| GitHub Docs