Despite the CVE bogus problem, I think that automatic dependency vulnerability scans is of the essence given the rapid pace of change that the field and its libraries experience. The hook added to the PR direclty checks against safety-db for known vulns. This hook is one of the supported hooks in the pre-commit documentation, present here and seems to me like the no brainer solution for implementing a one shot validation when requirements get updated.

For runs at the time of writing, the requirements established for AIOS show no existent vulnerability.