Before they got taken over by GitHub, Dependabot used to provide a dashboard for each package. This dashboard displayed how many successful & failing CI builds of dependent projects using the package there had been for each version of the package.
This gave an admittedly imperfect, but nevertheless useful, indication of the quality of each package release.
Does this still exist somewhere...?
[#]ruby #dependabot #github
=> More informations about this toot | More toots from floehopper@ruby.social
@floehopper it puts a little compatibility score image in the PRs it raises: https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates#about-compatibility-scores
=> More informations about this toot | More toots from richardTowers@hachyderm.io
@richardTowers So it does! I’d completely missed that! I do still think it’s a shame there’s not still a dashboard for each package listing all the scores for all recent versions and ideally links to failing builds in public repos!
=> More informations about this toot | More toots from floehopper@ruby.social This content has been proxied by September (ba2dc).Proxy Information
text/gemini