Turn Dependabot off(words.filippo.io)
606 points by todsacerdoti | 178 comments
Filippo Valsorda's blog post arguing that Dependabot is a noise machine and should be turned off, especially for security alerts in the Go ecosystem.
2 stories tagged dependency-management, newest first.
606 points by todsacerdoti | 178 comments
Filippo Valsorda's blog post arguing that Dependabot is a noise machine and should be turned off, especially for security alerts in the Go ecosystem.
464 points by Bluestein | 135 comments
Astral's uv documentation guide section on running Python scripts that declare their own dependencies.