Package dependency risk - deps.dev advisories, license, release age, OpenSSF Scorecard and risk flags for an npm, PyPI, Go, Maven, Cargo or NuGet package