Dependabot is joining GitHub
Edit: copy/pasting my more extensive comment from the Sponsors thread.<p>All the recent additions to Github are superficially very nice and convenient features (Actions, package registry, Sponsors, Dependabot).<p>But they represent a very significant change in mindset. Github is turning from a neutral code hosting platform with a myriad of equally empowered third party integrations into the direction of a "all in one" dev tool and platform.<p>I understand the internal pressures to do this: increased popularity, added value proposition for customers, more revenue.<p>But: all the built-in tools will have an inherent advantage over third party solutions. This inevitably leads to increased lock-in and homogenization.<p>I was very critical of the Microsoft acquisition for similar reasons, and considering the monumental role Github represents for open source today, I am very sceptical of the way things are going.<p>We might very well regret centralizing everything open source around Github in a few years.