Skip to content
/ deps Public

Deps is a command-line tool for staying on top of dependencies. It runs updates, automates pull requests, and keeps your local installations in check.

License

Notifications You must be signed in to change notification settings

dropseed/deps

Repository files navigation

Deps

deps GitHub release

Deps is a command line tool for staying on top of dependencies. It runs updates, automates pull requests, and keeps your local installations in check.

This repo contains the code for the deps command line tool itself (written in Go), but each language/ecosystem has it's own repo which often uses the native language and acts as a light wrapper around the native dependency management tools. This way deps can automate updates using the same tools that you would use in your terminal.

Read the docs →

deps overview flowchart

The key features of deps are:

  • Native languages and tools: The goal is to wrap the native package managers when possible (npm, yarn, pipenv, composer, etc.), so the updates delivered by deps are the same as updates you would make yourself on the command line.
  • Manifests vs Lockfiles: If you use "react": "^17.0.0" in your package.json, we'll send you a pull request when 18.0.0 comes out. This is an out-of-range update to a direct dependency. But when react 17.1.2 is released, all you need to do is update your lockfile (package-lock.json or yarn.lock). In JavaScript, for example, your lockfile can be outdated daily between all of your direct and indirect (transitive) dependencies. These are in-range updates to direct and indirect (transitive) dependencies, and deps will send you a single rolling pull request to keep your lockfile up-to-date. Lockfile and manifest pull requests
  • Runs in an environment you control: Deps runs in the same CI environment that you use for testing. You have full control over the container/host and system requirements.
  • Pluggable ecosystem: We maintain a set of "official" components, but new or bespoke dependency types can be supported by pointing to a different component repo.

Quick install

$ curl -sSL https://deps.app/install.sh | bash -s -- -b $HOME/bin

Official components

License

The license for the command line tool itself (this repo) is TBD. The individual components are all open-source, usually MIT licensed.

About

Deps is a command-line tool for staying on top of dependencies. It runs updates, automates pull requests, and keeps your local installations in check.

Topics

Resources

License

Stars

Watchers

Forks

Contributors 3

  •  
  •  
  •