cargo-audit is a subcommand for cargo which audits Cargo.lock files for crates with security vulnerabilities