GitHub will roll out dependency review, a security assessment for pull requests, in the coming weeks to developers. SEE: Meet the hackers who earn millions for saving the web, one bug at a time ...

This feature integrates with GitHub’s protected branches, Berman said — if the reviewer requested changes to a pull request on a protected branch, the pull request can be blocked.