In the pull request, how can developers avoid adding new dependencies with known vulnerabilities?

To detect and blockvulnerable dependencies before merge, developers should use theDependency Review GitHub Actionin their pull request workflows. It scans all proposed dependency changes and flags any packages with known vulnerabilities.

This is apreventative measureduring development, unlike Dependabot, which reactsafter the fact.