Repositories list

• dependabot-core

  Public
  🤖 Dependabot's core logic for creating update PRs.

  javascriptrubypython+ 12

  javascriptrubypythonjavagodockerrustphprubygemselixir+ 5

  Ruby

  •

  MIT License

  •1.5k1.5k forks•5.7k5.7k stars•1.2k1.2k issues•281281 pull requests•Updated Aug 30, 2026Aug 30, 2026

• proxy

  Public
  Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

  Go

  •

  MIT License

  •2929 forks•135135 stars•1111 issues•1212 pull requests•Updated Aug 30, 2026Aug 30, 2026

• fetch-metadata

  Public

  dependabot/fetch-metadata’s past year of commit activity
  Extract information about the dependencies being updated by a Dependabot-generated PR.

  TypeScript

  •

  MIT License

  •125125 forks•331331 stars•2222 issues•1111 pull requests•Updated Aug 30, 2026Aug 30, 2026

• cli

  Public
  A tool for running Dependabot update jobs.

  Go

  •

  MIT License

  •8080 forks•467467 stars•1919 issues•88 pull requests•Updated Aug 30, 2026Aug 30, 2026

• smoke-tests

  Public

  dependabot/smoke-tests’s past year of commit activity
  A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

  Shell

  •5757 forks•7373 stars•55 issues•2727 pull requests•Updated Aug 28, 2026Aug 28, 2026

• git-shim

  Public

  dependabot/git-shim’s past year of commit activity
  git https shim

  Go

  •77 forks•2525 stars•11 issue•00 pull requests•Updated Jul 29, 2026Jul 29, 2026

• yarn-lib

  Public

  dependabot/yarn-lib’s past year of commit activity
  A build of yarn that provides access to its internals

  Shell

  •1818 forks•1818 stars•00 issues•22 pull requests•Updated Jul 17, 2026Jul 17, 2026

• demo

  Public template

  dependabot/demo’s past year of commit activity
  🤖 Fork me to try out Dependabot

  Ruby

  •4.9k4.9k forks•332332 stars•11 issue•88 pull requests•Updated Jul 6, 2026Jul 6, 2026

• codeowner-migration-action

  Public
  Shell

  •66 forks•1010 stars•00 issues•00 pull requests•Updated Aug 1, 2025Aug 1, 2025

• example-cli-usage

  Public
  Demonstrates how to self-host Dependabot :dependabot:

  Shell

  •

  MIT License

  •2929 forks•5454 stars•00 issues•44 pull requests•Updated May 8, 2025May 8, 2025

• dependabot-script

  Public archive
  Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

  Ruby

  •

  MIT License

  •270270 forks•570570 stars•00 issues•77 pull requests•Updated May 8, 2025May 8, 2025

• goproxy

  Public archive
  An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-r…

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •1.2k1.2k forks•2222 stars•00 issues•11 pull request•Updated Mar 13, 2025Mar 13, 2025

• .github

  Public
  2626 forks•2323 stars•00 issues•11 pull request•Updated Apr 29, 2024Apr 29, 2024

• dependabot-actions-workflow

  Public archive
  Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

  Ruby

  •1919 forks•3737 stars•00 issues•11 pull request•Updated May 12, 2023May 12, 2023

• dummy-packages

  Public
  Dummy packages for testing Dependabot

  Ruby

  •1616 forks•2020 stars•00 issues•00 pull requests•Updated May 12, 2023May 12, 2023

• updater-action

  Public archive
  Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depe…

  TypeScript

  •

  MIT License

  •7676 forks•1010 stars•00 issues•00 pull requests•Updated Oct 7, 2022Oct 7, 2022

• gem-vulnerability-analysis

  Public archive
  Jupyter notebook for a blog post on gem vulnerabilities and version updates.

  Jupyter Notebook

  •55 forks•2323 stars•00 issues•00 pull requests•Updated Sep 6, 2022Sep 6, 2022

• prometheus-aggregator-ruby

  Public archive
  A Ruby client for https://github.com/peterbourgon/prometheus-aggregator

  Ruby

  •

  MIT License

  •33 forks•1212 stars•00 issues•44 pull requests•Updated Aug 9, 2022Aug 9, 2022

• elixir-security-advisories

  Public archive
  Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

  securityelixir

  securityelixir

  Ruby

  •

  Other

  •1010 forks•155155 stars•11 issue•00 pull requests•Updated Jul 22, 2022Jul 22, 2022

• gomodules-extracted

  Public archive
  This code was originally used in dependabot-core, but has since been removed. See Readme for details.

  Go

  •88 forks•2020 stars•00 issues•00 pull requests•Updated Nov 24, 2021Nov 24, 2021

• api-docs

  Public archive
  [Deprecated] Documentation for Dependabot Preview's API

  2121 forks•4444 stars•33 issues•00 pull requests•Updated Jul 29, 2021Jul 29, 2021

• feedback

  Public archive
  The old feedback repository for Dependabot. Click below for the new repository.

  3030 forks•9797 stars•00 issues•00 pull requests•Updated Jun 29, 2020Jun 29, 2020

• vgotest

  Public
  A dummy Go Module for testing Dependabot.

  33 forks•1313 stars•11 issue•00 pull requests•Updated May 20, 2020May 20, 2020

• monolog

  Public
  A fork of "Seldaek/monolog" used for dependabot-core tests

  PHP

  •

  MIT License

  •1.9k1.9k forks•1111 stars•00 issues•00 pull requests•Updated Aug 27, 2019Aug 27, 2019

• php-dummy-pkg-b

  Public
  A dummy PHP package for testing Dependabot.

  33 forks•1414 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017

• php-dummy-pkg-a

  Public
  A dummy PHP package for testing Dependabot.

  33 forks•1515 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017