Depends if you have a good test suite with wide coverage and you feel confident with it. If so, check dependabot PRs on a regular cycle (once a week or 2 weeks or once every sprint)
Else, focus on getting that test suite
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
Depends if you have a good test suite with wide coverage and you feel confident with it. If so, check dependabot PRs on a regular cycle (once a week or 2 weeks or once every sprint)
Else, focus on getting that test suite