15 ms·

Why didn't GitHub come up with this? This seems like such an obvious use case.

• timrogers 1y ago
  GitHub PM here. We have tried this, but we weren't able to get results that we were satisfied with. Of course, you have to revisit these things regularly, as the models and wider state of the art are evolving so quickly!
• chadfurman 1y ago
  It's a niche for AI, which creates some great opportunities for context engineering :)
• robszumski 1y ago
  It requires you to go deep in both the code analysis and the research, which is expensive at their scale And, as someone who's start up (EdgeBit was acquired by FOSSA recently) wrote a new JS/TS static analysis engine, it's just hard to get correct.
• zingababba 1y ago
  GitHub hasn't done anything interesting with dependabot or code scanning for awhile.
  • danudey 1y ago
    They're spending all of their engineering resources on not doing anything interesting with Copilot instead.
    • viraptor 1y ago
      And not solving lots of small issues listed on... GitHub. The community project is such an issues graveyard.
• SkyPuncher 1y ago
  Because this won't work. Dependency updates are actually incredibly hard.