Unlocking security updates for transitive dependencies with npm

How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%.

address dependabot dependencies engineering javascript npm security security updates supply chain security updates vulnerabilities