security risk_scan deps_audit code_smell