Depfu vs DepsHub

Depfu is an online service for keeping software dependencies up to date. It connects to GitHub and GitLab repositories through their APIs and opens pull requests with updates and related information; users decide whether to merge them. Supported ecosystems are Ruby Bundler, JavaScript npm, Yarn and pnpm, PHP Composer, and Elixir Hex. Update settings can be configured individually, grouped into recurring requests, or limited to security updates. Security vulnerability updates take priority, and Depfu syncs with open-source databases and GitHub security alerts. The service keeps no more than seven dependency update pull requests open at once. Depfu says it accesses repositories through provider APIs without cloning them, and that traffic to and inside its service is encrypted with SSL/TLS. Enterprise runs on customer infrastructure with GitHub Enterprise or self-hosted GitLab, keeping code in the customer’s network. That deployment requires a Linux machine or VM supporting Docker, with at least two CPU cores and 8 GB of RAM. A free plan covers public and personal account repositories. Paid plans start at $29 a month; a 21-day trial is listed.

DepsHub automates dependency updates and adds license checks and vulnerability scanning for software projects. Its Autopilot checks for newer versions and opens pull requests; the feature page says AI updates can handle major updates automatically. Smart scheduling is intended to keep dependencies reasonably fresh while limiting unnecessary changes, and Autopilot supports monorepos and multi-language projects. DepsHub monitors license changes, provides license details, and can export an SBOM in CycloneDX format. It scans for known vulnerabilities and says it integrates with popular security advisories. Listed integrations include GitHub, GitLab, Bitbucket, Linear, Jira, and Zapier. The pricing FAQ lists JavaScript, Python, Go, Rust, Java, and PHP as supported languages. The Open Source plan is free for open-source repositories, and the homepage also describes free access for personal projects. Professional costs $19 a month per code contributor and includes unlimited public and private repositories, team members, security alerts, and integrations. DepsHub lists Linux, macOS, Windows, web, and self-hosted deployment.