Automated Dependency Vulnerability Scanning Pipeline

Design a comprehensive TypeScript-based automated vulnerability scanning microservice for technology company software repositories. The solution should integrate with GitHub Actions, parse package.json and yarn.lock files, cross-reference CVE databases, and generate real-time security reports. Implement type-safe vulnerability scoring using generics, with automated Slack/email notifications for critical security findings. Include configuration for custom risk thresholds and support for multiple package managers.