LB: I feel like github pre-trained me with the brainworms level reputational miasma of dependabot -- which the first time I saw, I said out loud "if somebody was using bots on github to push malware changes it would look exactly like this", and here it is. But I fear most people took the opposite lesson...