Definitely needed stuff.
Has automated pull requests to update dependencies.
The issue feed is used by github I think.
Including the lgtm.com stuff is quite powerful. Mostly free for open source stuff.
Dependency scanning! Automated pull requests and security audit emails. That’s cool. Even needed.
Does OWASP scanning of your repo.
Seems like a nice competitor to github.
I know they have some scanning stuff in their pipelines, but it’s not dedicated such as Snyk.