Understanding the Customization of Dependency Bots: The Case of Dependabot

Dependency bots are becoming a de facto solution to automate dependency management, ensuring the quality and trustworthiness of software supply chains. We analyze how dependency bots are customized. We provide designers of dependency bots and software developers with insights into the compromises that should carefully be considered regarding customization features.