$ jdx --help @jdx.dev · Jan 27

dependabot/renovate considered harmful

2 likes 1 replies

?

Replies

Pierre-E Mercier · Jan 27

We don't use it at enterprise level, because a simple merge can embed bugs/malware/... for that we prefer to use the good old boyscout mode, when a developer fixes/adds a feature on a project, he must also update dependencies and test.