Libraries.io can automatically keep track of all of the packages that your repositories depend upon > how does that involve webhooks?

[ell1e]

Libraries.io offers the following feature:

Libraries.io can automatically keep track of all of the packages that your repositories depend upon across many different package managers.

Once synced, Libraries.io will email you about new versions of your dependencies, if you add or remove a new dependency it will change the notifications settings for that package as soon as you push to your repositories.

I don't find it entirely clear why this will need have write access to all my webhooks, but yet the GitHub app auth lists that permission as required: "Repository webhooks and services - read and write access." Could you add an explanation why that is needed? (Like, to the actual page where this feature is explained that I quoted from) Or preferably, I suggest you maybe get rid of that write permission if it's not really necessary.