Green Metrics Tool uses GitHub Actions to automatically pull in security updates from dependecies.
Furthermore security vulnerabilities own to the Green Metrics Tool itself will be patched as soon as the vendor is aware of them.
If you believe you have found a security vulnerability please contact [email protected] for disclosure.
Non critical vulnerabilites can also be disclosed via GitHub Issues.