@maennchen This paraxial blog says that dependabot actually doesn’t alert vulnerability and suggest MixAudit library for this.
Disclaimer, i read this article few days ago, so just pointing it. I don’t have hands-on experience on dependabot.
@maennchen This paraxial blog says that dependabot actually doesn’t alert vulnerability and suggest MixAudit library for this.
Disclaimer, i read this article few days ago, so just pointing it. I don’t have hands-on experience on dependabot.