Saw https://owasp.org/www-project-dependency-check/ <https://owasp.org/www-project-dependency-check/>
and that it can run on Macs given that homebrew seems to support it. If there was a macports port of it, could that be run on macports ports (maybe even on the buildbots) to make sure that known vulnerability issues (fixable with updates, perhaps) aren't missed?