Automatic systems for notifications regarding dependencies

[anargam]

Just looking at the PoC: keeping track of dependencies is and will forever be an ongoing concern. What does dependabot have to say at the current time?

[anargam]

Ping @lennartjoh (dependabot is of course not a panacea, but it's more than nothing).

Likewise for the internal dev environment. I'm not sure what is available there.