Black Duck SCA vs Depfu
Black Duck SCA
blackduck.comDepfu
depfu.comSide by side
| Figure | Black Duck SCA | Depfu |
|---|---|---|
| Price from | — | $29/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 6 |
| Spec score · Dependency Management Software | 7.8 (#13) | 8.3 (#7) |
| Headquarters | Burlington, Massachusetts, United States | Hamburg, Germany |
| Purpose | Black Duck SCA helps teams manage security, quality, and license compliance risks in open source and third-party code. | Depfu is an online tool that helps keep software dependencies up to date. |
Plans
Black Duck SCA
- Open source detection (enterprise edition)Priced on request
- Standard EditionPriced on request
Depfu
- Open Source/PersonalFree
- Starter$29 a month
- Team$59 a month
- Business$99 a month
- Enterprise Starter$1,200 a year
- EnterprisePriced on request
In their own words
Black Duck SCA
Black Duck SCA has no write-up on Specifiction yet; its figures are above.
Depfu
Depfu is an online service for keeping software dependencies up to date. It connects to GitHub and GitLab repositories through their APIs and opens pull requests with updates and related information; users decide whether to merge them. Supported ecosystems are Ruby Bundler, JavaScript npm, Yarn and pnpm, PHP Composer, and Elixir Hex. Update settings can be configured individually, grouped into recurring requests, or limited to security updates. Security vulnerability updates take priority, and Depfu syncs with open-source databases and GitHub security alerts. The service keeps no more than seven dependency update pull requests open at once. Depfu says it accesses repositories through provider APIs without cloning them, and that traffic to and inside its service is encrypted with SSL/TLS. Enterprise runs on customer infrastructure with GitHub Enterprise or self-hosted GitLab, keeping code in the customer’s network. That deployment requires a Linux machine or VM supporting Docker, with at least two CPU cores and 8 GB of RAM. A free plan covers public and personal account repositories. Paid plans start at $29 a month; a 21-day trial is listed.