Audit dependency changes for security risk

Reads a PR that bumps or adds libraries and surfaces breaking changes, security flags, and license conflicts before you merge—works with package.json, Cargo.toml, requirements.txt, and others.

Best for: Engineers reviewing automated dependency updates or major version bumps.