GitHub will pause Dependabot alerts on many inactive repositories from 8 December. Use a practical review to find quiet projects that still need security attention.