Dependabot is joining GitHub
Edit: copy/pasting my more extensive comment from the Sponsors thread.All the recent additions to Github are superficially very nice and convenient features (Actions, package registry, Sponsors, Dependabot).But they represent a very significant change in mindset. Github is turning from a neutral code hosting platform with a myriad of equally empowered third party integrations into the direction of a "all in one" dev tool and platform.I understand the internal pressures to do this: increased popularity, added value proposition for customers, more revenue.But: all the built-in tools will have an inherent advantage over third party solutions. This inevitably leads to increased lock-in and homogenization.I was very critical of the Microsoft acquisition for similar reasons, and considering the monumental role Github represents for open source today, I am very sceptical of the way things are going.We might very well regret centralizing everything open source around Github in a few years.