Security
Snyk
ESR API is integrated with Snyk to find and patch vulnerabilities in dependencies. Here is an example of checks on a pull request:

Snyk provides automated pull requests for vulnerabilities in dependencies as they arise, as well as advance patches, developed in-house by Snyk, until the maintainers patch the root vulnerability.
PEN Testing
A penetration test by a reputable external agency is planned before the project goes live.