Ninety-nine percent of new software projects depend on open source code. GitHub sent 27 million security alerts for vulnerable dependencies in Java, Java, JavaScript, Python and Ruby. GitHub will monitor your dependencies for known security vulnerabilities and automatically open pull requests to update them to the minimum required version. Maintainer security advisories (beta) are now available and token scanning is now generally available and supports more token formats including those from Alibaba Cloud, Mailgun and Twilio to make sure accidental check-ins dont turn into data breaches.”]
Source: https://github.blog/2019-05-23-introducing-new-ways-to-keep-your-code-secure/