Depfu
Claim this toolAutomated dependency updates done right for GitHub and GitLab repositories.
From $29/mo (free plan available)Visit WebsiteFreemiumVisit Website
Tracked since2026
The Bottom Line
- Price
- From $29/mo (free plan available). Compare plans
Key facts
- Automates dependency updates by creating pull requests in GitHub/GitLab.
- Provides detailed information for each update, including security advisories and changelogs.
- Intelligently schedules updates to avoid overwhelming developers and CI systems.
Pros
- Reduces manual effort and time spent on dependency management
- Helps maintain application security by facilitating timely updates
- Prevents overwhelming developers with too many updates
- Provides comprehensive information for informed update decisions
- Supports continuous integration workflows
Cons
- Primarily focused on GitHub and GitLab, potentially limiting for other VCS users
- Enterprise version for on-premise solutions requires direct contact
What is Depfu?
Depfu automates the process of keeping software dependencies up-to-date for teams using GitHub and GitLab. It integrates directly into development workflows by creating pull requests for new dependency versions, providing all necessary information like security advisories, release notes, and changelog details to help developers make informed decisions. The tool is designed to prevent overwhelming users with updates by intelligently scheduling PRs based on a library's release frequency, reducing the number of pull requests by approximately 50% compared to sending every new version.
This solution is ideal for busy development teams and individual developers who want to maintain secure and maintainable applications without the manual, time-consuming chore of constantly checking for and applying dependency updates. By facilitating small, continuous updates, Depfu helps teams avoid large, risky update batches and ensures they can quickly address security vulnerabilities, even for older applications.
Available on: Web
Preview
Key Features
- Automated pull request generation for new versions
- Integration with GitHub and GitLab
- Security advisory notifications
- Release notes and changelog parsing
- Configurable update frequency (per version, weekly, monthly)
- Intelligent update scheduling based on release frequency
- Support for bringing out-of-date apps up to speed gradually
- 21-day free trial for all plans
Pricing Plans
Free TrialPricing checked Sep 30, 2026
| Plan | Price | Details |
|---|---|---|
| Open Source/Personal | Free |
|
| Starter | $29 / mo |
|
| Team | $59 / mo |
|
| Business | $99 / mo |
|
Is Depfu worth the price?
Good value
Depfu's pricing is quite fair, especially with a generous free tier for open source and personal projects.
The Starter tier at $29/month for 5 private repos offers good value for small teams, scaling reasonably up to the Business tier at $99/month for 100 private repos. It's best for development teams of all sizes looking for reliable, automated dependency management.
Hidden Costs & Gotchas
No overage fees mentioned for repos.
Reviews
$99Free with your review
Write a reviewReview Depfu, get a free AI guide
Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.
Best Depfu Alternatives
Top alternatives based on features, pricing, and user needs.
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
Depfu FAQ
How does Depfu help maintain application security?
Depfu facilitates timely updates for dependencies, which helps teams quickly address security vulnerabilities. It provides information like security advisories directly within the pull requests to help developers make informed decisions.
What kind of user benefits most from Depfu?
Depfu is ideal for busy development teams and individual developers who aim to keep their applications secure and maintainable. It automates the chore of dependency updates, allowing developers to focus on core development tasks.
How does Depfu compare to Mend Renovate for dependency management?
Depfu reduces the number of pull requests by approximately 50% compared to sending every new version, intelligently scheduling updates based on a library's release frequency. It aims to prevent overwhelming users with updates while providing comprehensive information for decisions.
Which version control systems does Depfu support?
Depfu is primarily focused on GitHub and GitLab repositories. This integration allows it to automate dependency updates directly within these development workflows.
How is Depfu priced?
Depfu is available on a free tier, allowing users to start without initial cost. Paid plans are offered for those requiring more usage or additional features beyond the free offering.
Can Depfu integrate into existing continuous integration workflows?
Yes, Depfu supports continuous integration workflows by creating pull requests for new dependency versions. It provides all necessary information like release notes and changelog details to streamline the update process.
How does Depfu prevent overwhelming developers with too many updates?
Depfu intelligently schedules pull requests based on a library's release frequency. This approach reduces the number of pull requests by about 50% compared to generating a PR for every new version, preventing update fatigue.
Source: depfu.com