dependabot-cli

It is a command line tool to help you generate Github's dependabot.yml based on your project.

Getting started

Install

npm install -g @clouxart/dependabot
# or
yarn global add @clouxart/dependabot
# or just run without installing it
npx @clouxart/dependabot

Usage

dependabot
#or
dependabot ./my-projects-root-path
#or
dependabot --yes # it runs with default values

TODOs

• ignore config per package manager. i.e:

    ignore:
      # Starting with version 16.10.0, MSBuild requires .NET 5.0+
      - dependency-name: "Microsoft.Build"`;

• schedule config per package manager. i.e:

    schedule:
      interval: "daily"

• registries config per package manager. i.e:

    registries:
      - nuget-org