[adverbly]

Seriously!

We also suffer from this. Although in some cases it's due to a Dev dependency. It's crazy how much noise it adds specifically from ReDoS...

[monkpit]

ReDoS cves in your dev dependencies like playwright that could literally never be exploited, so annoying.

[robszumski]

Totally hear you on the noise…but we should want to auto-merge vs ignore, no? Given the right tooling of course.

[UqWBcuFx6NV4r]

We could just skip some steps and I could send you a zip file of malware for you to install on your infra directly if you’d like.

[dotancohen]

No