Repositories list

• dependabot-core

  Public
  🤖 Dependabot's core logic for creating update PRs.

  javascriptrubypython+ 12

  javascriptrubypythonjavagodockerrustphprubygemselixir+ 5

  Ruby

  •

  MIT License

  •1.4k1.4k forks•5.6k5.6k stars•1.2k1.2k issues•284284 pull requests•Updated May 22, 2026May 22, 2026

• smoke-tests

  Public

  dependabot/smoke-tests’s past year of commit activity
  A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

  Shell

  •4949 forks•7070 stars•44 issues•2121 pull requests•Updated May 22, 2026May 22, 2026

• proxy

  Public
  Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

  Go

  •

  MIT License

  •1919 forks•130130 stars•1010 issues•1111 pull requests•Updated May 22, 2026May 22, 2026

• cli

  Public
  A tool for testing and debugging Dependabot update jobs.

  Go

  •

  MIT License

  •7272 forks•430430 stars•2121 issues•77 pull requests•Updated May 21, 2026May 21, 2026

• fetch-metadata

  Public
  Extract information about the dependencies being updated by a Dependabot-generated PR.

  TypeScript

  •

  MIT License

  •117117 forks•314314 stars•1717 issues•44 pull requests•Updated May 20, 2026May 20, 2026

• git-shim

  Public
  git https shim

  Go

  •77 forks•2525 stars•11 issue•22 pull requests•Updated May 11, 2026May 11, 2026

• demo

  Public template
  🤖 Fork me to try out Dependabot

  Ruby

  •4.7k4.7k forks•314314 stars•11 issue•1515 pull requests•Updated Jan 24, 2026Jan 24, 2026

• codeowner-migration-action

  Public
  Shell

  •55 forks•99 stars•00 issues•00 pull requests•Updated Aug 1, 2025Aug 1, 2025

• example-cli-usage

  Public

  dependabot/example-cli-usage’s past year of commit activity
  Demonstrates how to self-host Dependabot :dependabot:

  Shell

  •

  MIT License

  •2727 forks•4949 stars•00 issues•44 pull requests•Updated May 8, 2025May 8, 2025

• dependabot-script

  Public archive
  Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

  Ruby

  •

  MIT License

  •268268 forks•567567 stars•00 issues•77 pull requests•Updated May 8, 2025May 8, 2025

• goproxy

  Public archive
  An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-r…

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •1.2k1.2k forks•1919 stars•00 issues•11 pull request•Updated Mar 13, 2025Mar 13, 2025

• .github

  Public
  2424 forks•2323 stars•00 issues•00 pull requests•Updated Apr 29, 2024Apr 29, 2024

• yarn-lib

  Public
  A build of yarn that provides access to its internals

  Shell

  •1818 forks•1818 stars•00 issues•00 pull requests•Updated Apr 17, 2024Apr 17, 2024

• dependabot-actions-workflow

  Public archive
  Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

  Ruby

  •1919 forks•3737 stars•00 issues•11 pull request•Updated May 12, 2023May 12, 2023

• dummy-packages

  Public
  Dummy packages for testing Dependabot

  Ruby

  •1515 forks•2020 stars•00 issues•00 pull requests•Updated May 12, 2023May 12, 2023

• updater-action

  Public archive
  Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depe…

  TypeScript

  •

  MIT License

  •6868 forks•1010 stars•00 issues•00 pull requests•Updated Oct 7, 2022Oct 7, 2022

• gem-vulnerability-analysis

  Public archive
  Jupyter notebook for a blog post on gem vulnerabilities and version updates.

  Jupyter Notebook

  •55 forks•2323 stars•00 issues•00 pull requests•Updated Sep 6, 2022Sep 6, 2022

• prometheus-aggregator-ruby

  Public archive
  A Ruby client for https://github.com/peterbourgon/prometheus-aggregator

  Ruby

  •

  MIT License

  •33 forks•1111 stars•00 issues•44 pull requests•Updated Aug 9, 2022Aug 9, 2022

• elixir-security-advisories

  Public archive
  Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

  securityelixir

  securityelixir

  Ruby

  •

  Other

  •99 forks•154154 stars•11 issue•00 pull requests•Updated Jul 22, 2022Jul 22, 2022

• gomodules-extracted

  Public archive
  This code was originally used in dependabot-core, but has since been removed. See Readme for details.

  Go

  •88 forks•2020 stars•00 issues•00 pull requests•Updated Nov 24, 2021Nov 24, 2021

• api-docs

  Public archive
  [Deprecated] Documentation for Dependabot Preview's API

  2020 forks•4242 stars•33 issues•00 pull requests•Updated Jul 29, 2021Jul 29, 2021

• feedback

  Public archive
  The old feedback repository for Dependabot. Click below for the new repository.

  2929 forks•9797 stars•00 issues•00 pull requests•Updated Jun 29, 2020Jun 29, 2020

• vgotest

  Public
  A dummy Go Module for testing Dependabot.

  22 forks•1313 stars•11 issue•00 pull requests•Updated May 20, 2020May 20, 2020

• monolog

  Public
  A fork of "Seldaek/monolog" used for dependabot-core tests

  PHP

  •

  MIT License

  •1.9k1.9k forks•1111 stars•00 issues•00 pull requests•Updated Aug 27, 2019Aug 27, 2019

• php-dummy-pkg-b

  Public
  A dummy PHP package for testing Dependabot.

  22 forks•1313 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017

• php-dummy-pkg-a

  Public
  A dummy PHP package for testing Dependabot.

  22 forks•1414 stars•00 issues•00 pull requests•Updated Jun 8, 2017Jun 8, 2017