Article is all about dependencies. And it only mentions JavaScript. So maybe a better topic would be: "How to use GitHub dependency tool to secure your Javascript project"
I’ve noticed Dependabot isn’t always even the greatest for JS projects. There are popular front-end frameworks such as Angular or React. When it makes PRs for currency updates, it seems unaware that it should
update all packages for a particular framework or update @types imports when it updates a package import.
Hi from the Dependabot team! We're working on a fix for the Typescript @types problem that should be available very soon.