Dependabot icon
Dependabot icon

Dependabot

Keep your dependencies on GitHub up to date without the automatic creation of the Pull Requests to update the dependency and checking for the known vulnerabilities.

https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/

Cost / License

  • Free
  • Open Source (MIT)

Application type

Platforms

  • Online  Official Documentation: [https://docs.github.com/en/code-security/dependabot](https://docs.github.com/en/code-security/dependabot)
  • Software as a Service (SaaS)
  • GitHub
  • GitLab  See this project on Gitlab: [https://gitlab.com/dependabot-gitlab/dependabot](https://gitlab.com/dependabot-gitlab/dependabot)
Dependabot alternatives  
3likes
19alternatives
0articles
Save

Features

Highlights All activities

Dependabot News & Activities

Recent activities

Dependabot information

AlternativeTo Categories

Development, Security & Privacy, Online Services

GitHub repository

  •  5,804 Stars
  •  1,556 Forks
  •  1585 Open Issues
  •   Updated  
View on GitHub

Popular alternatives

View all

Our users have written 1 comments and reviews about Dependabot, and it has gotten 3 likes

Dependabot was added to AlternativeTo by miso on and this page was last updated .

Comments and Reviews

   
degraded_referable382
0

It's very simple to use, open-source, self-hostable, supports a lot of package types, uses YAML config file for easy manipulation, what more could you ask?

Review from a new or low-activity account — shown here, but not counted in the app rating.

Official Links

AppStores & Other Links

What is Dependabot?

Keeping your dependencies updated is one of the easiest ways to keep the software you build secure. However, while it’s critically important to keep your dependencies updated, in a recent survey, 52% of developers said they find it painful1. Dependabot alleviates that pain by updating your dependencies automatically, so you can spend less time updating dependencies and more time building. Up until now, the Dependabot features we’ve brought to GitHub have focused on automated security updates, which update packages that have known vulnerabilities.