Yes, basically this tool is relying on github advisories, which is included in our list.