Topics / #dependencies

Dependencies projects on GitHub

Dependency update automation and dependency analysis tools.

As of , the most-starred Dependencies projects on GitHub are composer (29.6K stars), gitlabhq (24.6K stars) and renovate (22.8K stars). GitHub.Locker tracks 12 Dependencies repositories with 177.3K stars combined. The fastest-growing on October 16 was osv-scanner, with +7 stars in a day.

12Projects
177.3KStars in total
+22Stars in a day
Browse in the catalog →github.com/topics/dependencies ↗

Hot right now

Most stars gained in a day · Oct 16

+7

osv-scanner

google/osv-scanner · ★ 11.2K

OSV-Scanner is Google's open-source command-line vulnerability scanner: it checks your project's dependencies against OSV.dev, an open vulnerability database, and reports which known vulnerabilities affect you.

+6

renovate

renovatebot/renovate · ★ 22.8K

Renovate is an automated dependency update tool: it scans your repo for dependency references and opens pull requests when newer versions are available, so you don't update them by hand.

+2

composer

composer/composer · ★ 29.6K

Composer is the dependency manager for PHP: it helps you declare, manage, and install the libraries your PHP projects depend on.

+2

pip

pypa/pip · ★ 10.3K

pip is the package installer for Python — the standard way to add third-party packages to your Python setup.

The all-time top

12 projects · by stars

  1. #1 · composer/composer

    composer

    Composer is the dependency manager for PHP: it helps you declare, manage, and install the libraries your PHP projects depend on.

    29.6K
  2. #2 · gitlabhq/gitlabhq

    gitlabhq

    This is GitLab Community Edition, an open-source platform for managing Git repositories with merge requests, issue tracking, wikis, and built-in CI/CD pipelines, used by more than 100,000 organizations.

    24.6K
  3. #3 · renovatebot/renovate

    renovate

    Renovate is an automated dependency update tool: it scans your repo for dependency references and opens pull requests when newer versions are available, so you don't update them by hand.

    22.8K
  1. 4

    You-Dont-Need-Lodash-Underscore

    19.1Kyou-dont-need/You-Dont-Need-Lodash-Underscore · JavaScript

    A curated list of JavaScript methods that are already supported natively in modern browsers, so you can drop Lodash/Underscore — plus an ESLint plugin that flags where the libraries are unnecessary.

  2. 5

    CocoaPods

    14.8KCocoaPods/CocoaPods · Ruby

    CocoaPods is the dependency manager for Xcode projects: you list your dependencies in a Podfile, and it resolves them, fetches the source code, and builds an Xcode workspace for you.

  3. 6

    pyinstaller

    13.1Kpyinstaller/pyinstaller · Python

    PyInstaller takes a Python script and all its dependencies and bundles them into a single standalone executable or folder, so people can run the app without installing Python or any modules.

  4. 7

    patch-package

    11.2Kds300/patch-package · TypeScript

    patch-package lets you make a direct edit to a file inside a package in node_modules, and it turns that edit into a saved patch file that gets automatically re-applied every time npm or yarn install the package again.

  5. 8

    osv-scanner

    11.2Kgoogle/osv-scanner · Go

    OSV-Scanner is Google's open-source command-line vulnerability scanner: it checks your project's dependencies against OSV.dev, an open vulnerability database, and reports which known vulnerabilities affect you.

  6. 9

    npm-check-updates

    10.3Kraineorshine/npm-check-updates · TypeScript

    npm-check-updates (ncu) is a CLI tool that upgrades your package.json dependencies to the latest versions, ignoring the specified version ranges — while keeping your existing semver policy.

  7. 10

    pip

    10.3Kpypa/pip · Python

    pip is the package installer for Python — the standard way to add third-party packages to your Python setup.

  8. 11

    madge

    10.2Kpahen/madge · JavaScript

    Madge is a developer tool that creates a visual graph of your module dependencies and finds circular dependencies in JavaScript and CSS preprocessor code.

  9. 12

    vet

    181laravel/vet · PHP

    Laravel Vet is a dependency audit for PHP: it shows you the code a composer update is about to write into your vendor/ directory and records the packages you trust in a vet.json file, so each next update only asks about what changed.

Often tagged together