nofusscomputing / nofusscomputing/centurion_ui
Disable dependabot and implement scheduled code scanning
Open
@jon-nfc is already working on this.
Since Jun 16, 2026.
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 20
Description
Dependabot is a github service to scan the codebase and report and in some cases update "vulnerable" dependencies.
Details
Of late dependabot has become mode of a spam bot than assistive. Its also been double and triple reporting the same issue.
Create and implement a scheduled CI job that code scans the dep files, uploads the results and additionally creates a PR with the fixes that can be merged.
Tasks
- Disable Dependabot
- Create Scheduled CI scan job
- Create logic to update deps via PR
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.