1.renovatebot / renovate
Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io
+912 stars
from 22,095 · score 6.82
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
18 repositories by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.webpro-nl / knip
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
- unused-code
- unused-exports
- +4 more
+749 stars
from 11,845 · score 6.62
3.mikepenz / AboutLibraries
AboutLibraries automatically collects all dependencies and licenses of any gradle project (Kotlin MultiPlatform), and provides easy to integrate UI components for Android and Compose Multiplatform environments
- aboutlibraries
- mikepenz
- fragments
- android
- libraries
- android-library
- +12 more
+109 stars
from 4,382 · score 4.70
4.raineorshine / npm-check-updates
Find newer versions of package dependencies than what your package.json allows
- npm
- npm-check-updates
+50 stars
from 10,274 · score 3.93
5.pahen / madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
- graphviz
- graph
- amd
- commonjs
- es6
- sass
- +4 more
+50 stars
from 10,129 · score 3.93
6.ds300 / patch-package
Fix broken node modules instantly 🏃🏽♀️💨
+31 stars
from 11,202 · score 3.47
7.safedep / vet
Protect against malicious open source packages 🤖
+31 stars
from 1,093 · score 3.47
+23 stars
from 1,845 · score 3.18
9.Roave / SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
- php
- security-advisories
- security-vulnerability
- composer
- infosec
- security-vulnerabilities
+22 stars
from 2,907 · score 3.14
+20 stars
from 2,101 · score 3.04
11.saecki / crates.nvim
A neovim plugin that helps managing crates.io dependencies
+16 stars
from 1,110 · score 2.83
12.composer-unused / composer-unused
Show unused composer dependencies by scanning your code
- composer
- php
- php-parser
- hacktoberfest
+14 stars
from 1,681 · score 2.71
13.dotnet-outdated / dotnet-outdated
A .NET Core global tool to display and update outdated NuGet packages in a project
+14 stars
from 1,681 · score 2.71
14.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
- soc2
- pci-dss
- +14 more
+5 stars
from 1,467 · score 1.79
+4 stars
from 1,672 · score 1.61
16.Splitties / refreshVersions
Life is too short to google for dependencies and versions
+3 stars
from 1,707 · score 1.39
17.dylang / npm-check
Check for outdated, incorrect, and unused dependencies.
+1 stars
from 6,633 · score 0.69
+1 stars
from 1,142 · score 0.69