I'm not so sure. The dependabot has been helpful on occasion, when it doesn't spam me too much.