I have been using CodeMedic to scan my own repositories. Where the BOM indicates packages are behind the latest version, indicate where there may be conflicts when updating to latest versions. I have had instances where I update a package, then try to update a further package only to find that the latter update nominally requires earlier versions of the package you have just updated.