GitHub launches new tools to say when your project’s dependencies get pwned | Hacker News Reader