GitHub repository has vulnerability alerts disabled.

Property
Language
Severity
Service	repositories
Provider	GitHub
Vulnerability Type	omission

Description#

The GitHub repository is configured with vulnerability alerts disabled, which prevents automated notifications about known security issues in dependencies. This setting leaves the repository unaware of vulnerabilities that could be present in its codebase.

Impact#

Without vulnerability alerts, critical security flaws in repository dependencies may go undetected, increasing the risk of attackers exploiting known vulnerabilities. This can lead to data breaches, compromised application integrity, and potential exposure of sensitive information.

Resolution#

Enable vulnerability alerts