Dependabot Alerts are designed to do what?

• A. Notify you about malware
• B. Notify you about vulnerable dependencies in public repositories
• C. Notify you about license changes
• D. Notify you about new issues

Answer: (B)

Dependabot Alerts are about keeping your project secure by watching the dependencies it uses. They scan the dependency manifests and lockfiles in public repositories and compare the versions you rely on against a database of known security advisories. When a vulnerability is found in one of those dependencies, an alert is raised with details and recommended fixed versions, so you can update promptly and reduce risk. This is different from warnings about malware, license changes, or general new issues, which are not specifically about vulnerabilities in dependencies.