Yufan You
Yufan You
@hakusai22 You can unsubscribe from this issue if you don't want to receive notifications. Please don't close it.
1. 我认为即使不考虑 dependabot alert，无论是从安全角度还是可维护性角度，都应当持续地升级依赖，而这就可以解决大部分 dependabot alert 了 2. 对于 false positive，人工审查一下关掉往往是非常简单的，如果不简单则恰恰说明这个 alert 是有用的，说不定不是 false positive
我认为升级依赖很麻烦往往是因为很久没有升，如果一开始就持续升级其实是很轻松的事
当然，如果现在已经升不动了，没人来处理的话，也可以关一些通知。Dependabot alerts 和 Dependabot security updates 是分开的，关后者就可以不自动开 PR，前者可以保留，watch 时应该可以选择性不 watch security alerts。
> I can share a few modules but rather not disclose the entire app if that's ok . You are encouraged to provide as little code as possible, as long...
> Would you expect this to respect `completion.list.cycle`? It should cycle if it's already at the end, but not to cycle if there are fewer than `count` but more than...
> That said, being able to have interactive _pages_ instead of only components would be great. You can just use a component as the only content of the page.
> Just in case you missed it: [vite.dev/blog/announcing-vite6](https://vite.dev/blog/announcing-vite6) ...but that's already November 2024, so I'm kind of confused by the statement. 😅 I believe that it means #326 gets merged.
Is transparency working fine in other applications?