How to scan open-source dependency vulnerabilities: read the report, then order the fixes

One scan can list hundreds of dependency vulnerabilities, and the same component version shows up more than once. In AngusSecurity, fix Critical and then High, upgrade that component version, and use the next scan to confirm the security gate.