3 ms·
(Disclosure: current PM for Dependabot Alerts, currently working at GitHub) You're right -- we haven't invested nearly enough in Dependabot Alerts. We're worki
by havs 5y ago
(Disclosure: current PM for Dependabot Alerts, currently working at GitHub)
You're right -- we haven't invested nearly enough in Dependabot Alerts. We're working to change that, starting with some foundational improvements like alert persistence, which shipped in February. (https://github.blog/2022-02-08-improving-developer-experience-dependabot-alerts/ https://github.blog/2022-02-08-improving-developer-experienc...)
After our recent ship, we're in good shape to start addressing some of your concerns, like greater clarity through an alert's lifecycle or comments with dismissal.
Would love to hear any additional feedback. Let me know!