webaudit analyzes a Gemfile.lock file for security vulnerabilities.    the source of the lockfile could be a Ruby On Rails(RoR) application    or in theory any project that has a `Gemfile.lock` file