GitHub Dependency Submission for Mix

@maennchen This paraxial blog says that dependabot actually doesn’t alert vulnerability and suggest MixAudit library for this.

Disclaimer, i read this article few days ago, so just pointing it. I don’t have hands-on experience on dependabot.