Skip to content
SPECIFICTION
Get listed

Depfu

depfu.com

From $29/mo Free plan WebSelf-hosted
Visit depfu.com
Spec score 8.3 #7 of 27 in Dependency Management Software

What it is

Depfu is an online service for keeping software dependencies up to date. It connects to GitHub and GitLab repositories through their APIs and opens pull requests with updates and related information; users decide whether to merge them. Supported ecosystems are Ruby Bundler, JavaScript npm, Yarn and pnpm, PHP Composer, and Elixir Hex. Update settings can be configured individually, grouped into recurring requests, or limited to security updates. Security vulnerability updates take priority, and Depfu syncs with open-source databases and GitHub security alerts. The service keeps no more than seven dependency update pull requests open at once. Depfu says it accesses repositories through provider APIs without cloning them, and that traffic to and inside its service is encrypted with SSL/TLS. Enterprise runs on customer infrastructure with GitHub Enterprise or self-hosted GitLab, keeping code in the customer’s network. That deployment requires a Linux machine or VM supporting Docker, with at least two CPU cores and 8 GB of RAM. A free plan covers public and personal account repositories. Paid plans start at $29 a month; a 21-day trial is listed.

Spec sheet

Purpose
Depfu is an online tool that helps keep software dependencies up to date.Read 1 Oct 2026 · depfu.com
Support
The maker says its bootstrapped two-person team provides customer service and offers Premium Support on the Business and Enterprise plans.Read 1 Oct 2026 · depfu.com
Headquarters
Hamburg, GermanyRead 28 Sep 2026 · depfu.com
Encryption
Depfu says all traffic to and inside its service is encrypted with SSL/TLS.Read 1 Oct 2026 · depfu.com
Enterprise deployment
Depfu Enterprise runs on the customer’s infrastructure with GitHub Enterprise or self-hosted GitLab, and the customer’s code stays in its network.Read 1 Oct 2026 · depfu.com
Enterprise requirements
Depfu Enterprise requires a Linux machine or VM supporting Docker with at least two CPU cores and 8 GB of RAM.Read 1 Oct 2026 · depfu.com
Pull-request limit
Depfu never has more than seven dependency update pull requests open at the same time.Read 1 Oct 2026 · depfu.com
Repository integrations
Depfu connects to GitHub and GitLab repositories through their APIs.Read 1 Oct 2026 · depfu.com
Security updates
Security vulnerability updates jump the queue and Depfu syncs with open-source databases and GitHub security alerts.Read 1 Oct 2026 · depfu.com
Source-code handling
Depfu says it never clones repositories and accesses them through the GitHub or GitLab API.Read 1 Oct 2026 · depfu.com
Supported ecosystems
Depfu supports Ruby Bundler, JavaScript npm/Yarn/pnpm, PHP Composer, and Elixir Hex.Read 1 Oct 2026 · depfu.com
Update strategies
Users can configure individual updates, recurring grouped updates, or security-only updates.Read 1 Oct 2026 · depfu.com
Update workflow
Depfu sends pull requests containing dependency updates and related information while users control whether to merge them.Read 1 Oct 2026 · depfu.com

Plans and prices

Open Source/Personal Free public and personal account repos · Unlimited dependency updates Read 1 Oct 2026 · depfu.com
Starter $29 a month monthly 5 private repos · Unlimited dependency updates Read 1 Oct 2026 · depfu.com
Team $59 a month monthly 25 private repos · Unlimited dependency updates Read 1 Oct 2026 · depfu.com
Business $99 a month monthly 100 private repos · Unlimited dependency updates · Premium Support Read 1 Oct 2026 · depfu.com
Enterprise Starter $1,200 a year annually Up to 10 developers · Unlimited repos · Unlimited dependency updates Read 1 Oct 2026 · depfu.com
Enterprise Priced on request More than 10 developers · Unlimited repos · Unlimited dependency updates · Premium Support Read 1 Oct 2026 · depfu.com

Every Depfu plan and price →

Strong points and limits

Strong points

  • Supports four listed package ecosystems.
  • Security updates move ahead of other updates.
  • Offers configurable individual or grouped update requests.
  • Enterprise keeps code within the customer’s network.

Limits

  • Supports GitHub and GitLab repositories only.
  • Keeps at most seven update pull requests open at once.
  • Enterprise requires Linux, Docker, two CPU cores and 8 GB RAM.

Who it suits

Depfu suits developers and teams using GitHub or GitLab with supported package ecosystems. Enterprise is for organizations that want the service on their own infrastructure.

Verdict

Depfu automates dependency-update pull requests while leaving merge decisions with users. Its repository providers, supported ecosystems and seven-request limit are important fit checks.

Where Specifiction places it

Alternatives to DepfuAll alternatives →