GitLab Launches Open Source Tool to Track Down Malicious Code in Dependencies