Home of the Mend Renovate CLI: Cross-platform Dependency Automation by Mend.io
Repository Index
81,337 visible repositories in the index
1–22 of 22 · Most stars
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Interactive UI for local node modules inspection
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
- python
- security
- security-vulnerability
- travis
:coffee: A tool to generate requirements.txt for Python project, and more than that. (IT IS NOT A PACKAGE MANAGEMENT TOOL)
- pip
- requirements
- python
- pypi
Modern, scalable tools. Exceptional developer experience.
- react-native
- cli
- monorepo
- typescript
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Protect against malicious open source packages 🤖
Interactively browse dependency graphs of Nix derivations.
- nix
- dependency-graph
- hacktoberfest
Tool to check C++ #include dependencies (dependency graphs created in .dot format)
Update version constraints in your Terraform / OpenTofu configurations
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Helper script to aid upgrading magento 2 websites by detecting overrides. Now supports third party module detections
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
A visual tool to help developers understand Elixir recompilation in their projects
Terminal UI for Go dependency updates with outdated module detection and selective upgrading.
- go
- go-modules
- golang
- outdated
Checks prefer-lowest installation for actually defined min versions in composer.json
- composer
- composer-scripts
- composer-support
- php
Dependency management and optimization in Jupyter Notebooks
- notebook
- jupyter-notebooks
- package-management
- dependency-manager
A GitHub Action that automatically updates Quarto extensions in your repository, similar to how Dependabot manages dependencies.
- dependabot
- github-actions
- quarto
- quarto-extension
cmake-xray is a build inspection tool for CMake projects that reveals include hotspots, dependency structures, and rebuild impact.
- cmake
- analysis
- diagnostics
- hexagonal-architecture