Optional comment-only second opinion beside Dependabot (no CI gate) #99

Why

SmartPhoto shows active Dependabot npm grouping (e.g. recent patch-and-minor group #98, plus earlier grouped chore(deps-dev) bumps). Even when those PRs merge quickly, an optional comment-only second opinion can sit beside Dependabot without changing your workflow.

Action (comment-only)

Happy to suggest dep-second-opinion as an opt-in Action that posts comments only. It does not replace your workflow, does not gate CI, and does not edit package.json or lockfiles.

Optional policy YAML if you want to tune what gets commented on; defaults work to start.

Pin example:

uses: lory69060/dep-second-opinion@v0.2.0

Install notes: https://github.com/lory69060/dep-second-opinion/blob/main/docs/install.md

If you already feel Dependabot + CI is enough, please close this — totally fine either way.