Maybe we would want to investigate how to implement dependabot on our repo.
Gitlab Dependabot Documentation