Auto Audit Dependencies (advisories → upgrade tasks)

Scheduled-safe dependency audit that works whether the repository is a web app, a mobile app, a service, or a polyglot monorepo. It finds every lockfile, checks each pinned package against known security advisories, keeps the ones at or above the severity threshold, works out the smallest upgrade that clears them, and files one tracker issue per vulnerable package — reusing an existing issue instead of filing a copy. It never edits manifests or lockfiles: the upgrade itself is the filed issue's job ().