Packagist is the main Composer repository. It aggregates public PHP packages installable with Composer.
Composer command for only auditing installed or updated packages in composer.lock
Drupal Dependency Quality Gate - aims to helps with running Drupal projects on secure and high quality Drupal dependencies
Drupal Dependency Quality Gate Composer Audit plugin
Configures Rector to understand a Drupal 8+ codebase.