#opensource

Unless your package is huge, your advisory waits

It's now taking months for Dependabot and npm audit to flag known vulnerabilities, unless the package is one of the giants.

26 October 20266 min read#security#opensource#github#dependabot#npm#python