Color me curmudgeon, but automated dependency updates should never be a consideration.

Also, one thing I do like that Github does is that it can be configured to send you a report of dependency changes (in yarn, for example).