Ask HN: How do small teams pragmatically manage Dependabot fatigue?
Amount of CVEs nowadays is kind of madness and I'm wondering how you're all dealing with the updates? I know larger organizations are more structured in this regard - there's private dependencies registry with some kind of vetting process, so not everyone has to decide what version to take.But what about smaller projects without private registry platform solution? How you go about updating your...