David McIntosh

> but it shouldn't use GET http://... should it? If it really uses goproxy as a standard HTTP proxy It does seem strange but I'm not positive it's not allowed....

@jeffwidman I think we need to add a test case for this before undrafting. We could also followup with the npm team on this behavior. I have a vague memory...

I happened to be looking at the PR title code and cleaned part of this up in https://github.com/dependabot/dependabot-core/pull/5915 > The string "Updates ansi-regex from 3.0.0 to 5.0.1" should probably say...