Bookmarking this article for the next time dependabot alerts come up at work. It’s a really fun read on a pretty dry topic and full of an appropriate amount of incredulity at some of the high severity vulnerabilities that get flagged.