Depfu is the best way for busy teams to keep their app dependencies up-to-date. We believe doing small, easy to assess updates regularly and supported by automation is a lot easier than falling behind and having to update everything at once.

We support all Ruby projects using Bundler, all JS projects using npm or Yarn, all Elixir projects using Hex and all PHP projects using Composer. Lock files are handled automatically.

View Depfu website

😍 What customers are saying

Simone Carletti – CTO, dnsimple:

Depfu is a great tool that helps you to reduce the stress of periodically checking dependency updates, with the risk to miss important releases. It definitely reduced the time we spend on maintenance at dnsimple.

Scott Robertson – Engineer, Baremetrics:

Absolutely loving Depfu. When managing quite a few repos across Baremetrics, it really helps keep on top of updates and security patches.

↗️ Get PRs for new versions

You'll get super nice PRs with all the info you need to make an informed decision about a new version. From security advisories, release notes to all commits for that version.

⏱️ Adapts to your pace

Our smart scheduler makes sure to never overwhelm your team or your CI system.

✨ Just works

Automatic conflict resolution, monorepos, private git dependencies, private package registries and more – It just works.

👉 A lightweight process for updating dependencies that actually works