The only reason you'd release a tool like this as a github integration and not an open source library (optionally with a CLI tool) is that you want to get money from it - nothing wrong with that, but that is very much an either/or question.
With the advantage that if the dev likes the advice, all they need to do is click "commit"
But yes, SaaS is not a silver bullet. If you like convenience and getting updates, bug fixes, and quick set up with no overhead then it's for you. If you want to run things yourself then understandable have a great day :)
Sure, configuration management is hard, it doesn't mean you don't have to do it. If anything, in an organization that big, you should have someone creating a process for managing dependency upgrades. There will always be critical security vulnerabilities and other use cases for package upgrades that need to be patched across all of your repos.
The suggestion that you don't have to do it for this particular feature is kicking the can down the road.
I see manually updating libraries as a feature that allows for deterministic linting.
I wouldn't want my linter to always be updated to the latest version because that might introduce warnings or deprecation errors that aren't warnings or errors in the version of the tools used in the code I'm linting.
Most linters also don't require manual changes but do automatic fixing, ie: black[0].
Non-user initiated updates to QA tools will only lead to alert fatigue because people will write it off as an update to to tool.
Similarly they way Django Doctor works is more convenient:
- it's suggests a change that can be applied in one click - it's suggestion can be ignored - no overhead cost because it's SaaS
but yes, if you don't value SaaS in this context then that's fair enough :)
That said, if you live in Github and other SaaS services this fits really well. In the past I've setup similar workflow to cater to people who never dared to touch a terminal or Git itself. So there is certainly enablement this tool brings to some people.