Might be worth strengthening this too? You should always be monitoring these lists or services for frameworks you use, and potentially for all your dependencies.