X Tutup
The Wayback Machine - https://web.archive.org/web/20220403200406/https://github.com/github/roadmap/issues/473
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose information about development dependencies in Dependabot alerts #473

Open
github-product-roadmap opened this issue Mar 15, 2022 · 0 comments
Labels
all ga security & compliance

Comments

@github-product-roadmap
Copy link
Collaborator

@github-product-roadmap github-product-roadmap commented Mar 15, 2022

Summary

In ecosystems like npm where developers can indicate that a certain dependency is used during development only (a devDependency), developers have asked for a way to understand when Dependabot alerts are related only to a development dependency. In this initial ship, we expect to add support for a label on alerts that concern development dependencies to make it easier to filter, triage, or sort alerts.

Intended Outcome

No response

How will it work?

No response

@github github locked and limited conversation to collaborators Mar 15, 2022
@github-product-roadmap github-product-roadmap added all ga security & compliance labels Mar 15, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
all ga security & compliance
Projects
Status: Q2 2022 – Apr-Jun
Development

No branches or pull requests

1 participant
X Tutup