dependabot GitHub ↗

In-Org Review Champions

No review data yet.

In-Org Gatekeepers

No data yet.

Repos

dependabot-core Ruby 5.4k stars done

🤖 Dependabot's core logic for creating update PRs.

5000 merged PRs · avg 8 days · fastest 0m
dependabot-script Ruby 563 stars done

Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

382 merged PRs · avg 5 days · fastest 0m
cli Go 393 stars done

A tool for testing and debugging Dependabot update jobs.

328 merged PRs · avg 5 days · fastest 0m
fetch-metadata TypeScript 295 stars done

Extract information about the dependencies being updated by a Dependabot-generated PR.

305 merged PRs · avg 13 days · fastest 0m
smoke-tests HCL 60 stars done

A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

294 merged PRs · avg 3 days · fastest 1m
yarn-lib Shell 15 stars done

A build of yarn that provides access to its internals

39 merged PRs · avg 1 day · fastest 0m
proxy Go 119 stars done

Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

32 merged PRs · avg 18.3h · fastest 2m
elixir-security-advisories Ruby 151 stars done

Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

24 merged PRs · avg 2.6h · fastest 1m
git-shim Go 22 stars done

git https shim

21 merged PRs · avg 8 days · fastest 1m
dependabot-actions-workflow Ruby 34 stars done

Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

19 merged PRs · avg 22 days · fastest 1m
gomodules-extracted Go 17 stars done

This code was originally used in dependabot-core, but has since been removed. See Readme for details.

10 merged PRs · avg 1 day · fastest 9m
demo Ruby 295 stars done

🤖 Fork me to try out Dependabot

8 merged PRs · avg 1 month · fastest 11m
api-docs 40 stars done

[Deprecated] Documentation for Dependabot Preview's API

6 merged PRs · avg 4 months · fastest 0m
feedback 94 stars done

The old feedback repository for Dependabot. Click below for the new repository.

5 merged PRs · avg 1 day · fastest 35m
example-cli-usage Shell 35 stars done

Demonstrates how to self-host Dependabot :dependabot:

5 merged PRs · avg 1.6h · fastest 10m
.github 20 stars done
3 merged PRs · avg 6.1h · fastest 4m
gem-vulnerability-analysis Jupyter Notebook 19 stars done

Jupyter notebook for a blog post on gem vulnerabilities and version updates.

2 merged PRs · avg 1.7h · fastest 2m
dummy-packages Ruby 17 stars done

Dummy packages for testing Dependabot

1 merged PRs · avg 11.8h · fastest 11.8h
goproxy Go 16 stars done

An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-registry-credential-management We maintain a fork in case the original goes down or if we need to run additional patches on top.
php-dummy-pkg-a 12 stars done

A dummy PHP package for testing Dependabot.