Dependency management

Renovate

Renovate Bot automates dependency updates. Flexible so you don't need to be

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

Depfu

Automated dependency updates done right

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Greenkeeper

Real-time notifications about updates and changes for JavaScript dependencies

MyGet

Artifact and Package Repositories: Hosted NuGet, npm, Bower, Maven, PHP Composer and VSIX feeds and build services

Releases Tracker

Keep track of new releases

JS Bundle Analyzer

Keep your webpack bundle optimized over time

ClearlyNoticed Action

Maintain a NOTICE file based on your package-lock.json

Bump Git Submodules

Bump git submodules on '/submodules' comment

php-ga.composer-require-checker

composer-require-checker

Composer Action

Do Composer commands in your actions

GitHub Action for npm in Alpine Linux

A fork of actions/npm, using Alpine Linux instead of Debian

GitHub Action for Maven

Wraps the Maven CLI to enable Maven commands

GitHub Action for Homebrew

Wraps the Homebrew CLI to enable common Homebrew commands

Pipenv for Github Actions

Use pipenv commands in your GitHub Actions Workflow

GitHub Action for Renovate

Automated dependency updates in a Github Action

Phalcon Composer Action

Do Composer commands in your actions

Checkout submodules

Recursively checks out any submodules in your repository