Open SourceProductSecurityYarn support for security alertsYarn now supports security alerts for public and private repositories. GitHub security alerts help developers stay on top of vulnerabilities that impact their dependencies. JavaScript developers already receive alerts for their NPM-based projects that use package.json and package-lock.json manifests. Now developers who use Yarn for dependen