Install payload
Install payload is broadly covered in current results.
100% (2/2)
Browse the directory
/
Showing 2 resources for "dependabot"
Saved
/ search · [ ] view density · esc clear input
Active
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Most at-risk entries in this view
Adoption queue
Browse adoption queue · balanced
0/2 visible results are ready for staged adoption under this preset.
ready 0caution 2hold 0
Dependency Update Review Rules
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
rules/dependency-update-review-rules · trust review · confidence 67%
Dependency Update Triage Agent
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/dependency-update-triage-agent · trust review · confidence 67%
Decision confidence
Decision confidence scan · balanced
0/2 results are high-confidence for the selected preset.
high 0medium 2low 0
Dependency Update Review Rules
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
rules/dependency-update-review-rules · trust review
Dependency Update Triage Agent
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
agents/dependency-update-triage-agent · trust review
Freshness distribution
Current results are broadly fresh
Median age 47 days; all 2 scanned entries are within 90 days.
Source-backed agent for triaging dependency update pull requests with SemVer risk, Dependabot context, GitHub dependency review, OSV advisories, OpenSSF Scorecard signals, lockfile changes, test evidence, and privacy-safe notes.
Source-backed rules for reviewing dependency update pull requests with supply-chain context, lockfile discipline, advisory checks, compatibility evidence, and privacy-safe metadata handling.