There are tools that can help you to audit your list of dependencies. One such tool is OWASP Dependency-Check (https://www.owasp.org/index.php/OWASP_Dependency_Check). Although it only supports Java and .NET officially, it has experimental support for Python, Ruby, Node.js, and C++ (when used with CMake or autoconf). Besides working as a standalone tool, it has integrations for Continuous Integration/Continuous Deployment (CI/CD) software such as Jenkins, SonarQube, and CircleCI.
Another tool that allows checking dependencies for known vulnerabilities is Snyk. This is a commercial product with several levels of support. It also does more than the OWASP Dependency-Check as Snyk can also audit container images and license compliance issues. It also offers more integrations with third-party solutions.