well you know 100% know what dependabot does

Leaves you open to vulnerabilities in overnight builds of NPM packages that increasingly happen due to LLM slop?

	▲	__float 2 hours ago \| parent [-]
		You can set a minimum age for packages (https://docs.github.com/en/code-security/reference/supply-ch...), though that's not perfect (and becomes less effective if everyone uses it).