Repositories list

• dependabot-core

  Public
  🤖 Dependabot's core logic for creating update PRs.

  javascriptrubypython+ 12

  javascriptrubypythonjavagodockerrustphprubygemselixir+ 5

  Ruby

  •

  MIT License

  •1.5k1.5k forks•5.7k5.7k stars•1.2k1.2k issues•311311 pull requests•Updated Jul 8, 2026Jul 8, 2026

• smoke-tests

  Public
  A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

  Shell

  •5050 forks•7171 stars•55 issues•2323 pull requests•Updated Jul 8, 2026Jul 8, 2026

• yarn-lib

  Public
  A build of yarn that provides access to its internals

  Shell

  •1818 forks•1818 stars•00 issues•33 pull requests•Updated Jul 7, 2026Jul 7, 2026

• git-shim

  Public
  git https shim

  Go

  •77 forks•2525 stars•11 issue•00 pull requests•Updated Jul 7, 2026Jul 7, 2026

• proxy

  Public
  Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

  Go

  •

  MIT License

  •2424 forks•131131 stars•1010 issues•99 pull requests•Updated Jul 6, 2026Jul 6, 2026

• fetch-metadata

  Public
  Extract information about the dependencies being updated by a Dependabot-generated PR.

  TypeScript

  •

  MIT License

  •117117 forks•323323 stars•1919 issues•44 pull requests•Updated Jul 6, 2026Jul 6, 2026

• cli

  Public
  A tool for testing and debugging Dependabot update jobs.

  Go

  •

  MIT License

  •7474 forks•441441 stars•2222 issues•88 pull requests•Updated Jul 6, 2026Jul 6, 2026

• demo

  Public template
  🤖 Fork me to try out Dependabot

  Ruby

  •4.8k4.8k forks•317317 stars•11 issue•88 pull requests•Updated Jul 6, 2026Jul 6, 2026

• codeowner-migration-action

  Public
  Shell

  •66 forks•1010 stars•00 issues•00 pull requests•Updated Aug 1, 2025Aug 1, 2025

• example-cli-usage

  Public
  Demonstrates how to self-host Dependabot :dependabot:

  Shell

  •

  MIT License

  •2929 forks•4949 stars•00 issues•44 pull requests•Updated May 8, 2025May 8, 2025

• dependabot-script

  Public archive
  Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

  Ruby

  •

  MIT License

  •269269 forks•569569 stars•00 issues•77 pull requests•Updated May 8, 2025May 8, 2025

• goproxy

  Public archive
  An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-r…

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •1.2k1.2k forks•1919 stars•00 issues•11 pull request•Updated Mar 13, 2025Mar 13, 2025

• .github

  Public
  2525 forks•2323 stars•00 issues•00 pull requests•Updated Apr 29, 2024Apr 29, 2024

• dependabot-actions-workflow

  Public archive
  Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

  Ruby

  •1919 forks•3737 stars•00 issues•11 pull request•Updated May 12, 2023May 12, 2023

• dummy-packages

  Public
  Dummy packages for testing Dependabot

  Ruby

  •1616 forks•2020 stars•00 issues•00 pull requests•Updated May 12, 2023May 12, 2023

• updater-action

  Public archive
  Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depe…

  TypeScript

  •

  MIT License

  •6969 forks•1010 stars•00 issues•00 pull requests•Updated Oct 7, 2022Oct 7, 2022

• gem-vulnerability-analysis

  Public archive
  Jupyter notebook for a blog post on gem vulnerabilities and version updates.

  Jupyter Notebook

  •55 forks•2323 stars•00 issues•00 pull requests•Updated Sep 6, 2022Sep 6, 2022

• prometheus-aggregator-ruby

  Public archive
  A Ruby client for https://github.com/peterbourgon/prometheus-aggregator

  Ruby

  •

  MIT License

  •33 forks•1111 stars•00 issues•44 pull requests•Updated Aug 9, 2022Aug 9, 2022

• elixir-security-advisories

  Public archive
  Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

  securityelixir

  securityelixir

  Ruby

  •

  Other

  •1010 forks•155155 stars•11 issue•00 pull requests•Updated Jul 22, 2022Jul 22, 2022

• gomodules-extracted

  Public archive
  This code was originally used in dependabot-core, but has since been removed. See Readme for details.

  Go

  •88 forks•2020 stars•00 issues•00 pull requests•Updated Nov 24, 2021Nov 24, 2021

• api-docs

  Public archive
  [Deprecated] Documentation for Dependabot Preview's API

  2020 forks•4242 stars•33 issues•00 pull requests•Updated Jul 29, 2021Jul 29, 2021

• feedback

  Public archive
  The old feedback repository for Dependabot. Click below for the new repository.

  2929 forks•9797 stars•00 issues•00 pull requests•Updated Jun 29, 2020Jun 29, 2020

• vgotest

  Public
  A dummy Go Module for testing Dependabot.

  33 forks•1313 stars•11 issue•00 pull requests•Updated May 20, 2020May 20, 2020

• monolog

  Public
  A fork of "Seldaek/monolog" used for dependabot-core tests

  PHP

  •

  MIT License

  •1.9k1.9k forks•1111 stars•00 issues•00 pull requests•Updated Aug 27, 2019Aug 27, 2019

• php-dummy-pkg-b

  Public
  A dummy PHP package for testing Dependabot.

  22 forks•1313 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017

• php-dummy-pkg-a

  Public
  A dummy PHP package for testing Dependabot.

  22 forks•1414 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017