# Dependabot relieves alert fatigue from npm devDependencies

DevFeed: [Dependabot relieves alert fatigue from npm devDependencies](<https://devfeed.tech/articles/dependabot-relieves-alert-fatigue-from-npm-devdependencies-68017.md>)

Original publisher: [Read original article](<https://github.blog/security/supply-chain-security/dependabot-relieves-alert-fatigue-from-npm-devdependencies/>)

Author: Eric Tooley

Published: 2023-05-02T20:36:16Z

Content type: release

Language: en

Sources: [GitHub Blog](<https://devfeed.tech/sources/github-engineering.md>)

Topics: [alert triage](<https://devfeed.tech/topics/alert-triage.md>), [Dependabot](<https://devfeed.tech/topics/dependabot.md>), [CVE fatigue](<https://devfeed.tech/topics/cve-fatigue.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm-workspaces](<https://devfeed.tech/topics/npm-workspaces.md>)

Tags: [alert-fatigue](<https://devfeed.tech/tags/alert-fatigue.md>), [dependabot](<https://devfeed.tech/tags/dependabot.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [npm](<https://devfeed.tech/tags/npm.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

## AI overview

GitHub has released a public beta feature that uses curated rules and contextual metadata to automatically dismiss likely false positive Dependabot alerts for npm devDependencies. GitHub says the feature is expected to reduce npm alerts by about 15%; it is enabled by default for public repositories and can be enabled by private repository administrators.

## Source excerpt

A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives.