drop gitlab dependency scan export · parse dependency + cve + scanner · runs locally
drop gitlab dependency scan export · local only
heuristic screener · vendor schema varies · not definitive proof