I was thinking something similar to cargo-audit, because domain names don't really fix anything here