Fix: #900. Add dependency checks

[ioggstream]

This PR

• adds informative owasp dependency checks in CI

Note

you can enforce validation output and block deployment when insecure deps are found

[christophd]

+1 but I would rather run this in a separate CI job. making this check part of the general build job may break PRs from people that are not in charge of maintaining the dependencies.

Also what about running this on a nightly basis instead of with each PR or code change?

[christophd]

uff, this PR is open for a long time with no activity. Closing ...