Dependency vulnerability scanner