> Once a dependency turns into a security vulnerability How will you know if/when that happens? Are you subscribed to the development channels of all your dep

> Once a dependency turns into a security vulnerability How will you know if/when that happens? Are you subscribed to the development channels of all your dependencies? Do you examine every one of their commits for security fixes?