3 ms·
There are 2 problems with dependabot, 1: it requires you to have a code on github orherwise you can't receive alerts 2: they send months old alerts, even if yo
by daudmalik06 5y ago
There are 2 problems with dependabot,
1: it requires you to have a code on github orherwise you can't receive alerts
2: they send months old alerts, even if you go to check security advisory of github, you'll notice the date of those issues will be very old.
- daudmalik06 5y agoFurther, vulert is also 100% free for open source software.
- neximo64 5y agoI don't know if this is true, I saw a couple of Neo4j vulnerabilities show up as soon as the next day once it was disclosed.