1.renovatebot / renovate
Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io
+1,739 stars
from 21,268 · score 7.46
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
23 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.webpro-nl / knip
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
- unused-code
- unused-exports
- +4 more
+1,494 stars
from 11,100 · score 7.31
3.mikepenz / AboutLibraries
AboutLibraries automatically collects all dependencies and licenses of any gradle project (Kotlin MultiPlatform), and provides easy to integrate UI components for Android and Compose Multiplatform environments
- aboutlibraries
- mikepenz
- fragments
- android
- libraries
- android-library
- +12 more
+234 stars
from 4,257 · score 5.46
4.pahen / madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
- graphviz
- graph
- amd
- commonjs
- es6
- sass
- +4 more
+162 stars
from 10,017 · score 5.09
5.raineorshine / npm-check-updates
Find newer versions of package dependencies than what your package.json allows
- npm
- npm-check-updates
+155 stars
from 10,169 · score 5.05
+128 stars
from 768 · score 4.86
7.updatecli / updatecli
A Declarative Update Policy Engine
+112 stars
from 897 · score 4.73
8.safedep / vet
Protect against malicious open source packages 🤖
+103 stars
from 1,021 · score 4.64
9.ds300 / patch-package
Fix broken node modules instantly 🏃🏽♀️💨
+92 stars
from 11,141 · score 4.53
10.utdemir / nix-tree
Interactively browse dependency graphs of Nix derivations.
- nix
- dependency-graph
- hacktoberfest
+85 stars
from 1,002 · score 4.45
+52 stars
from 1,816 · score 3.97
+49 stars
from 2,072 · score 3.91
13.dotnet-outdated / dotnet-outdated
A .NET Core global tool to display and update outdated NuGet packages in a project
+49 stars
from 1,646 · score 3.91
14.Roave / SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
- php
- security-advisories
- security-vulnerability
- composer
- infosec
- security-vulnerabilities
+48 stars
from 2,881 · score 3.89
15.saecki / crates.nvim
A neovim plugin that helps managing crates.io dependencies
+35 stars
from 1,091 · score 3.58
16.composer-unused / composer-unused
Show unused composer dependencies by scanning your code
- composer
- php
- php-parser
- hacktoberfest
+23 stars
from 1,672 · score 3.18
17.npmhub / npmhub
🔎 A browser extension to explore npm dependencies on GitHub repos
- chrome-extension
- github
- github-extension
- safari-extension
- firefox-addon
- browser-extension
- +1 more
+16 stars
from 821 · score 2.83
18.maglnet / ComposerRequireChecker
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
- code-quality
- ci-tools
+15 stars
from 996 · score 2.77
19.Splitties / refreshVersions
Life is too short to google for dependencies and versions
+11 stars
from 1,699 · score 2.48
+11 stars
from 1,665 · score 2.48
21.dylang / npm-check
Check for outdated, incorrect, and unused dependencies.
+7 stars
from 6,627 · score 2.08
22.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
- soc2
- pci-dss
- +14 more
+7 stars
from 1,465 · score 2.08
+1 stars
from 1,142 · score 0.69