Heimdall

Dependency security watch for a GitHub repo: checks advisory feeds twice a day, opens a fix PR only after you approve.