Notes on fixing the lockfile

Comparisons and write-ups. Each one stays inside the same frame as the rest of the site.

Scandar and Dependabot

Both open a pull request. One runs inside GitHub. The other reads the lockfile you already committed and lets you choose the packages.

What Snyk publishes on its plans page, and what Scandar actually does on a lockfile.

What Socket publishes on its pricing page, and what Scandar does with a lockfile and a pull request.

What Aikido publishes on its pricing page, and what Scandar does with a lockfile and a pull request.