Product
Adversaries may disable GitHub Dependabot alerts or security updates at the repository, organization, or enterprise level to conceal the introduction of malicious or vulnerable dependencies.