Not sure about node but for Rails, Hakiri has been pretty useful - https://hakiri.io/ https://hakiri.io/ It's set up as a github webhook to run as part of you

Not sure about node but for Rails, Hakiri has been pretty useful - https://hakiri.io/ https://hakiri.io/ It's set up as a github webhook to run as part of your build, and it usually flags vulnerabilities in recent gems or Rails versions.