Developer security for code and dependencies