The officially official Devuan Forum!

Altoid

Member

Registered: 2017-05-07

Posts: 1,981  

GitHub and Dependabot

Hello:

Yes, you read right: Dependabot

------
Go library maintainer brands GitHub's Dependabot a 'noise machine'
When a one-line fix triggers thousands of PRs, something's off
by Tim Anderson                              Tue 24 Feb 2026 // 16:31 UTC
------

https://www.theregister.com/2026/02/24/ … /?td=rt-3a

A Go library maintainer has urged developers to turn off GitHub's Dependabot, arguing that false positives from the dependency-scanning tool "reduce security by causing alert fatigue."

Best,

A.

Last edited by Altoid (Today 20:03:53)