Your comments

If the projects come from GitHub, is it possible to use Dependabot?

https://github.com/dependabot