Renovate supports raising Pull Requests immediately for any JavaScript or Python package identified as having a vulnerable version by GitHub’s Vulnerability Alerts.
Renovate allows raising issues to warn a repository if it is using deprecated npm packages. This helps prevent that a dependency you are using may never get updates again.