3 ms·
There should be an actual green checkmark for Dependabot and others
by EGreg 3y ago
There should be an actual green checkmark for Dependabot and others
- funcDropShadow 3y agoDependabot should sign it's PRs with a gpg signature. And web interface could get support to check those signatures. That is way more trustworthy than a random green flag in some web ui that changes all the time.