conformance/.github
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Paul Carleton 6464588da2
Add dependabot config with 7-day dependency cooldown (#57)
Configures Dependabot to wait 7 days after a package is published
before creating update PRs. This helps protect against supply chain
attacks by allowing time for malicious packages to be detected and
removed.

See: https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-11-25 20:35:39 +00:00
..
workflows Use --bin flag for pkg.pr.new to show npx commands (#40) 2025-11-20 11:48:01 +00:00
dependabot.yml Add dependabot config with 7-day dependency cooldown (#57) 2025-11-25 20:35:39 +00:00