In my lesser known company, we've been receiving leads who share their codebase repositories which contain malware or buggy dependencies, even though we offer cybersecurity services.

If I were able to predict the future I would say that soon GitHub, GitLab and others will release inproved security sensors.