[jonfw]

When you have a hundred dependencies- who is looking at the release notes to see what security vulnerabilities are being fixed?

[markmark]

Github can do it for you automatically.