Haven’t really used them directly, but pipenv has a check command that tests your dependencies against the free version of pyup.io. It’s nice, and while I’m not

Haven’t really used them directly, but pipenv has a check command that tests your dependencies against the free version of pyup.io. It’s nice, and while I’m not sure how better it could be but it’s still better than nothing and pointed out around 10 vulnerable deps (in a messy years-old Django project with like 50+ dependencies).