DepsHub vs GitHub CodeQL
DepsHub
depshub.com
GitHub CodeQL
codeql.github.comSide by side
| Figure | DepsHub | GitHub CodeQL |
|---|---|---|
| Price from | $19/mo | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 5 |
| Spec score · Dependency Management Software | 8.5 (#5) | 8.6 (#4) |
| Purpose | DepsHub provides automatic dependency updates, license checks, and security vulnerability scanning. | CodeQL is a language and toolchain for code analysis that treats code as data. |
| Supported languages | The pricing FAQ lists JavaScript, Python, Go, Rust, Java, and PHP as currently supported languages. | CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
DepsHub
DepsHub automates dependency updates and adds license checks and vulnerability scanning for software projects. Its Autopilot checks for newer versions and opens pull requests; the feature page says AI updates can handle major updates automatically. Smart scheduling is intended to keep dependencies reasonably fresh while limiting unnecessary changes, and Autopilot supports monorepos and multi-language projects. DepsHub monitors license changes, provides license details, and can export an SBOM in CycloneDX format. It scans for known vulnerabilities and says it integrates with popular security advisories. Listed integrations include GitHub, GitLab, Bitbucket, Linear, Jira, and Zapier. The pricing FAQ lists JavaScript, Python, Go, Rust, Java, and PHP as supported languages. The Open Source plan is free for open-source repositories, and the homepage also describes free access for personal projects. Professional costs $19 a month per code contributor and includes unlimited public and private repositories, team members, security alerts, and integrations. DepsHub lists Linux, macOS, Windows, web, and self-hosted deployment.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.