An Exploratory Study of Dependabot Cooldown Adoption in Open-Source GitHub Projects
It is found that security concerns motivated 83 of 92 adoption events with known motivations and early adopters favor simple default delays over fine-grained controls for dependencies with clear update priorities, suggesting that tools could provide robust defaults reflecting ecosystem support and reserve fine-grained...