I mentioned this elsewhere here, but check out `pipenv check`[0] and just run it in CI or as a precommit hook.

[0] https://docs.pipenv.org/advanced.html#detection-of-security-...