At its Universe conference, GitHub announced a number of features aiming to make your code more protected. These include a dependency graph and, built on top of the former, security alerts ...

Image: GitHub But the Dependency Graph and the Security Alerts feature won't work for all PHP projects. It will only work for PHP projects coded to work with Composer projects.