I recently build the application by myself and node complained about some critical, high and medium findings.
We should activate GHAS and all related features (dependabot) to ensure that team dojo is up2date.
We are using the tool to measure our security skills within the organization. Using a tool which is insecure is not an option :D