1. Use CodeQL to perform Python, JavaScript, Java, Go API analysis and Taint analysis.
2. Update dependencies of the pipeline.
3. Add capability to analyzing new packages incrementally, by ingesting feeds from *registries* mirrors.
4. Bring up the pipeline up to keep monitoring emerging threats.
