Paul Carleton
|
6464588da2
|
Add dependabot config with 7-day dependency cooldown (#57)
Configures Dependabot to wait 7 days after a package is published
before creating update PRs. This helps protect against supply chain
attacks by allowing time for malicious packages to be detected and
removed.
See: https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: Claude <noreply@anthropic.com>
|
2025-11-25 20:35:39 +00:00 |
|