I've been building that capability in dependency-management-data, an Open Source project - this then gives you an SQLite database you can query ie at https://dependency-management-data-example.fly.dev/datasette/ which also has the ability to track things like End of Life dependencies or add your own advisories to flag things too