add dependency vulnerability scanning

Author: purificant

Makefile

@@ -23,6 +23,10 @@ test-integration:
 coverage:
 	coverage run -m pytest && coverage report
 
+# audit dependencies for known vulnerabilities
+audit:
+	pip-audit
+
 check-updates:
 	uv pip list --outdated
 

pyproject.toml

@@ -35,6 +35,7 @@ dev = [
     "pre-commit~=4.5",
     "pyright~=1.1.407",
     "pypistats~=1.7",
+    "pip-audit~=2.9",
 ]
 
 # ruff configuration