Github Dependabot can be used to automatically check for newer versions of your dependencies and update vulnerable dependencies. Cloudsmith works with Dependabot to flag out of date dependencies.