Releases · caddyserver/caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS - caddyserver/caddy
Turn Dependabot Off
words.filippo.ioI recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.
Every dependency you add is a supply chain attack waiting to happen
Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
Seth Michael Larson
Python, open source, and the internet
