Comment by firesteelrain

> This incident demonstrates a systemic issue with automated vulnerability ingestion

But they make X-Ray which does automated vulnerability indexing and matching dependencies to CVEs.