You can now use Open Policy Agent with dependency-management-data (2 mins read).
How to use Open Policy Agent to perform much more effective flagging of package compliance with dependency-management-data.
by 
Jamie Tanna
.
#dependency-management-data
#open-policy-agent.