If you have a node codebase on Github, it will create pull requests against your codebase for your repository when there are security issues against a package you depend on. I'm not sure what you're expecting beyond that.
Well apparently others can do more using technology that is made available by Microsoft.
Things like detecting obfuscated code and SQL injection seem, reading this article, to be easily catched by chatGPT.
If this technology is so good, then why does GitHub not use it to improve security for the whole ecosystem?