hasura / hasura/graphql-engine
console: pin dependencies in package.json and add dependabot
Open
c/console
- Dominant language
- TypeScript
- Stars
- 32.1k
- Forks
- 3k
- PR merge metrics
- PR metrics pending
Description
Running `npm i` each time updates minor versions, which sometimes leads to bugs introduced by a new package version. That's why we want to pin all dependencies so that running `npm i` won't accidentally break things.
Adding `dependabot` as a monthly task will help with keeping dependencies up-to-date.
Contributor guide
Assessment
This issue has not been assessed yet.