This is an interesting development. I wrote about the dependency hell before in ref to Gutenberg and how it can be a security/licensing concern if not taken care of with the right tools.

Happy to see GitHub is stepping up their game to address this issue.