GitHub Dependabot in Action
I’ve used this awesome tool on 20 open-source projects over the last two years. Here’s my opinion
Published in
4 min readJan 17, 2023
Typical problems Dependabot solves range from updating direct upstream dependencies when they get a patch release to propagating the security vulnerabilities your upstream projects have already fixed. If you have minimal time and don’t have a whole team…