Depfu is the best way for busy teams to keep their app dependencies up-to-date. We believe doing small, easy to assess updates regularly and supported by automation is a lot easier than falling behind and having to update everything at once.

We support all Ruby projects using Bundler and all JS projects using npm or Yarn. Lock files are handled automatically.

View Depfu website

Continuous security analysis

LGTM is a code analysis platform for identifying vulnerabilities and preventing them from reaching production.

LGTM automatically runs 1600+ standard analyses contributed by researchers from the Semmle Security Research Team and our customer community, including Microsoft, Google, Uber and Mozilla.

Quickly refine and run custom QL queries to find variants of known issues and prevent them from being re-introduced into your codebase.