Why
hollo is a small-team TypeScript app with Dependabot majors in flight (e.g. #610 Vitest). For that Prefer profile — mid stars, bot majors, no obvious in-house second-opinion layer — an optional comment-only Action can sit beside Dependabot without changing how you ship.
Action (comment-only)
Happy to suggest dep-second-opinion as a comment-only opt-in. It does not replace your workflow, does not gate CI, and does not edit package.json or lockfiles.
Optional policy YAML if you want to focus on majors; otherwise defaults are fine.
Pin example:
uses: lory69060/dep-second-opinion@v0.2.0
Install notes: https://github.com/lory69060/dep-second-opinion/blob/main/docs/install.md
Happy to close if you already have in-house coverage or prefer to keep Dependabot as-is — no pressure.
Why
hollois a small-team TypeScript app with Dependabot majors in flight (e.g. #610 Vitest). For that Prefer profile — mid stars, bot majors, no obvious in-house second-opinion layer — an optional comment-only Action can sit beside Dependabot without changing how you ship.Action (comment-only)
Happy to suggest dep-second-opinion as a comment-only opt-in. It does not replace your workflow, does not gate CI, and does not edit
package.jsonor lockfiles.Optional policy YAML if you want to focus on majors; otherwise defaults are fine.
Pin example: