Shrezzing

12 ms·

1. 151.▲
   by Shrezzing 3y ago

   My understanding of the way dependabot works is that they read your repository's manifest files to provide alerts about vulnerable dependencies. Then after you patch the repository they re-read it to identify the new package version yo
2. 152.▲
   by Shrezzing 3y ago

   Everything referenced in this webpage refers only to public data, or private data where a user has enabled the dependency graph >data from public repositories, and also... data from private repositories when a repository's owner has
3. 153.▲
   by Shrezzing 3y ago

   >We're talking thousands of source files and god knows how many node_modules entries. I think most VSCode features are disabled for node_modules directories by default. At a guess, I'd say re-disabling that in your workspace fi
4. 154.▲
   by Shrezzing 3y ago

   > Seems to me that it's the team + market that won the money. That's pretty much it. Most analysts expect there's an addressable market of $20bn this year, growing to $100bn per year by the end of the decade. The market wi