Repositories list

• dependabot-core

  Public
  🤖 Dependabot's core logic for creating update PRs.

  javascriptrubypython+ 12

  javascriptrubypythonjavagodockerrustphprubygemselixir+ 5

  Ruby

  •

  MIT License

  •1.5k1.5k forks•5.7k5.7k stars•1.2k1.2k issues•284284 pull requests•Updated Jul 23, 2026Jul 23, 2026

• smoke-tests

  Public
  A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

  Shell

  •5252 forks•7474 stars•55 issues•2424 pull requests•Updated Jul 21, 2026Jul 21, 2026

• proxy

  Public
  Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

  Go

  •

  MIT License

  •2525 forks•134134 stars•1111 issues•1515 pull requests•Updated Jul 19, 2026Jul 19, 2026

• fetch-metadata

  Public
  Extract information about the dependencies being updated by a Dependabot-generated PR.

  TypeScript

  •

  MIT License

  •123123 forks•330330 stars•2121 issues•88 pull requests•Updated Jul 19, 2026Jul 19, 2026

• git-shim

  Public

  dependabot/git-shim’s past year of commit activity
  git https shim

  Go

  •77 forks•2525 stars•11 issue•11 pull request•Updated Jul 19, 2026Jul 19, 2026

• yarn-lib

  Public
  A build of yarn that provides access to its internals

  Shell

  •1818 forks•1818 stars•00 issues•22 pull requests•Updated Jul 17, 2026Jul 17, 2026

• cli

  Public
  A tool for running Dependabot update jobs.

  Go

  •

  MIT License

  •7676 forks•447447 stars•1919 issues•88 pull requests•Updated Jul 12, 2026Jul 12, 2026

• demo

  Public template

  dependabot/demo’s past year of commit activity
  🤖 Fork me to try out Dependabot

  Ruby

  •4.8k4.8k forks•327327 stars•11 issue•88 pull requests•Updated Jul 6, 2026Jul 6, 2026

• codeowner-migration-action

  Public
  Shell

  •77 forks•1111 stars•00 issues•00 pull requests•Updated Aug 1, 2025Aug 1, 2025

• example-cli-usage

  Public

  dependabot/example-cli-usage’s past year of commit activity
  Demonstrates how to self-host Dependabot :dependabot:

  Shell

  •

  MIT License

  •2929 forks•5252 stars•00 issues•44 pull requests•Updated May 8, 2025May 8, 2025

• dependabot-script

  Public archive
  Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

  Ruby

  •

  MIT License

  •270270 forks•570570 stars•00 issues•77 pull requests•Updated May 8, 2025May 8, 2025

• goproxy

  Public archive
  An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-r…

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •1.2k1.2k forks•2222 stars•00 issues•11 pull request•Updated Mar 13, 2025Mar 13, 2025

• .github

  Public
  2525 forks•2323 stars•00 issues•00 pull requests•Updated Apr 29, 2024Apr 29, 2024

• dependabot-actions-workflow

  Public archive
  Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

  Ruby

  •1919 forks•3737 stars•00 issues•11 pull request•Updated May 12, 2023May 12, 2023

• dummy-packages

  Public
  Dummy packages for testing Dependabot

  Ruby

  •1616 forks•2020 stars•00 issues•00 pull requests•Updated May 12, 2023May 12, 2023

• updater-action

  Public archive
  Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depe…

  TypeScript

  •

  MIT License

  •7070 forks•1010 stars•00 issues•00 pull requests•Updated Oct 7, 2022Oct 7, 2022

• gem-vulnerability-analysis

  Public archive
  Jupyter notebook for a blog post on gem vulnerabilities and version updates.

  Jupyter Notebook

  •55 forks•2323 stars•00 issues•00 pull requests•Updated Sep 6, 2022Sep 6, 2022

• prometheus-aggregator-ruby

  Public archive
  A Ruby client for https://github.com/peterbourgon/prometheus-aggregator

  Ruby

  •

  MIT License

  •33 forks•1212 stars•00 issues•44 pull requests•Updated Aug 9, 2022Aug 9, 2022

• elixir-security-advisories

  Public archive
  Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

  securityelixir

  securityelixir

  Ruby

  •

  Other

  •1010 forks•155155 stars•11 issue•00 pull requests•Updated Jul 22, 2022Jul 22, 2022

• gomodules-extracted

  Public archive
  This code was originally used in dependabot-core, but has since been removed. See Readme for details.

  Go

  •88 forks•2020 stars•00 issues•00 pull requests•Updated Nov 24, 2021Nov 24, 2021

• api-docs

  Public archive
  [Deprecated] Documentation for Dependabot Preview's API

  2121 forks•4444 stars•33 issues•00 pull requests•Updated Jul 29, 2021Jul 29, 2021

• feedback

  Public archive
  The old feedback repository for Dependabot. Click below for the new repository.

  2929 forks•9696 stars•00 issues•00 pull requests•Updated Jun 29, 2020Jun 29, 2020

• vgotest

  Public
  A dummy Go Module for testing Dependabot.

  33 forks•1313 stars•11 issue•00 pull requests•Updated May 20, 2020May 20, 2020

• monolog

  Public
  A fork of "Seldaek/monolog" used for dependabot-core tests

  PHP

  •

  MIT License

  •1.9k1.9k forks•1111 stars•00 issues•00 pull requests•Updated Aug 27, 2019Aug 27, 2019

• php-dummy-pkg-b

  Public
  A dummy PHP package for testing Dependabot.

  33 forks•1414 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017

• php-dummy-pkg-a

  Public
  A dummy PHP package for testing Dependabot.

  33 forks•1515 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017