As a backend developer I want to monitor my code for dependency updates and security flaws

[mor4thii]

Parts are already covered by Codacy. Something like renovate or dependabot would be awesome, though, and better integrated into GitHub.