GitHub will roll out dependency review, a security assessment for pull requests, in the coming weeks to developers.

This feature integrates with GitHub’s protected branches, Berman said — if the reviewer requested changes to a pull request on a protected branch, the pull request can be blocked.

A pull request is a request to the file’s maintainer to review a change and then, if approved, pull it in to the main file: This is an XML file for a DC law.

GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities. This is achieved by adding the new Dependency Review GitHub ...

In addition, GitHub implements features for code review (pull requests, diffs, and review requests), project management (including issue tracking and assignment), integrations with other developer ...