Assume I haven OS that has unattended security updates.
And I run a web backend written in python on that host.
And it has requirements.txt
And I create a virtualenv and venv/bin/pip install -r requirements.txt before running my backend.
And I want someone to go through requirements.txt, and find all libs that have vulns, and go through my code, see how I use those libs, and tell me which I need to update.