tidelift-lookup

This is an example use of of Tidelift's APIs.

It reads a series of syft outputs, and returns a CSV that assesses them against Tidelift's API to determine what bad dependencies are in use that the organization should move away from.