Travis J. Gosselin Software Developer, Architect & Speaker

• Posted by:
• travis
• No Comments

Dependabot native has been around for a couple years now after GitHub officially acquired it in 2019. But if I google "Dependabot" I still generally find myself at the "Dependabot.com" home-page, and up until last week found myself still using...

• Posted by:
• travis
• 3 Comments

Problem No matter what language or package manager, dependency management in most projects suffer from many of the same problems: Evaluating incoming security risks associated with packages in your project never really happens.Latest dependencies are added when a project starts,...