Closed sijis closed 2 years ago
This looks good to me. Is there a security bot in-place that'll track dependencies (dependabot or whatever) that will prompt us for stream updates?
I had the same thought too. There is dependabot but based on our current project layout I dont think it will detect the packages, so i'd have to swtich things up a bit to make that work. I did enable it though, so we'll see.
Pinning all package dependencies.