for consideration: submodule for package versus package

[LucasLarson]

note to self; context for consideration:

Having seen that I comprise half of zdharma-continuum/zsh-diff-so-fancy’s stargazers, I felt prompted to replace the plugin with the applicable npm package as was done with git-open (802072a92a)

On the other hand, if I move a package from $DOTFILES/.gitmodules (and $DOTFILES/custom/plugins into $(npm config get prefix --global)/bin, then Dependabot will no longer keep nudging me to update.

---

• Would it not be preferable to have Dependabot keep everything updated? (Noting that without symlinking and using npm in ways it’s not meant to be used, there’s no way to create a package.json and package-lock.json)