hedia-team / .github

0 stars 0 forks source link

feat: Add a workflow for updating vulnerable dependencies (npm audit fix) #53

Closed aimeerivers closed 2 months ago

aimeerivers commented 2 months ago

If vulnerabilities like this one are discovered in the packages we depend on, we would probably prefer to handle them quickly.

We would possibly want:

  1. To check for vulnerabilities much more frequently (daily?)
  2. To have it only update vulnerable packages (npm audit fix)
  3. To release and deploy very quicly
aimeerivers commented 2 months ago

i think initially we might just want to add this to Update Please