I scanned 8 popular open-source repos for outdated dependencies and CVEs. Here's what I found.
Most developers know their dependencies are probably outdated. Few know by how much.
I built ScanReq, a VS Code extension that scans dependency files, checks versions against public registries in real
