find a tool to audit dependencies

[DmitriyFirsov]

the tool should:

• be independent of git hosting
• has the ability to ignore certain vulnerabilities in dependencies and dev dependencies
• easy to add to the ci/cd

[DmitriyFirsov]

dependabot - only github
npm audit - no way to ignore vulnerabilities