See comment in the github action that explains why I think this is helpful: > the benefit of this over dependabot is that this also analyzes transitive dependencies > while dependabot (at least currently) only analyzes top-level dependencies |
||
|---|---|---|
| .. | ||
| checkstyle.xml | ||
| codenarc.groovy | ||
| dependency-check-suppressions.xml | ||
| spotless.license.java | ||