Backpatch is a report-only GitHub Action + API that flags security overrides that may look SafeToRemove when a parent already ships the fixed transitive. Trial + fail-on: never; you review before you delete. Not a delete guarantee. Site: https://backpatch.dev/action
Security overrides are useful safety nets, but they can linger long after a parent dependency ships a fix. Backpatch helps maintainers review when an override may no longer be needed without making the deletion decision for them.