GitHub Advisory Database now contains the full corpus of security advisories from the npm security database. More complete npm security data enables us to provide better Dependabot alerts and security updates. The npm security database will continue to publish advisories, but GitHub Advisory Database is now the source of truth for this data.