There are solutions to this - things like Dependabot go a long way and can integrate pretty seamlessly into your existing Git workflow.