Yes. Of course curating dependencies is super important. What I meant by automatically pull future commits is to keep the clone updated. I’m concerned about fut

Yes. Of course curating dependencies is super important. What I meant by automatically pull future commits is to keep the clone updated. I’m concerned about future maintainability should the main repo be removed from GitHub for whatever reason. From a security perspective we go into all details before introducing a dependency and track changes on future version - this is also currently a very manual process, not sure how this could be done better aswell.