GitHub extended its reach from the enterprise to the handheld as it opened its GitHub Universe event in San Francisco this week.

The self-hosted Enterprise Server line has hit v2.19, and the Microsoft sub majored on security improvements, including support for Web Authentication security keys, meaning security keys can be used for two-factor authentication across more devices and “most major browsers.

The dependency graph now supports vulnerability alerts for “.vcxproj and .fsproj files that list NuGet dependencies in their “PackageReference” section.” The company said users with .NET repos with these formats can “expect to see dependency graph changes and security alerts in the coming weeks”. The dependency graph also now supports scoped NPM packages.

More broadly, admins can now assign assign triage and maintain roles to users and teams, as well as new settings covering who can create and view repos.

v2.19 also brings general availability for the Audit Log GraphQL API, which means “admins can programmatically access audit log events for detailed security and compliance insights across their organizations and repositories. “ Admins also get a date for their diary – v2.16 will be deprecated as of January 22.

Meanwhile, GitHub Actions – its workfow automation tool – is now out of beta, and generally available. So it’s not a surprise that GitHub’s fellow Microsoft tentacle announced that GitHub Actions for Azure is also now GA. Also out of beta is GitHub packages.

Both services are now part of every GitHub developer account, “with included minutes, storage, and data transfer” – all of which is free for public repos.

At the same time, a slew of new GitHub features are now in beta, with GitHub for mobile top of the list – at least for iOS fans. Their Android loving counterparts have the option of joining a waitlist.

And if the prospect of having GitHub notifications and updates repeatedly landing in the palm of your hand sounds a little overwhelming, you’ll be glad to hear there is a limited beta for an “an inbox experience into GitHub to help you filter through and act on the work that is most important to you and your team.”

Furthermore, “all users of the GitHub for mobile beta will receive early access to the notifications beta for the best possible experience, with gradual rollout to all GitHub.com users over the next few months.”

There are also limited betas covering code search and code review assignment, and scheduled reminders, and betas for code review assignment and feature review.