pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Only 7 of the 47 people who sent their first pull request here got it merged.
10 of 66outside PRs merged (15%)
checked
Where newcomer work lands
The evidence