Freedom251 › Dependency Management Software
Depfu
What Depfu is
Depfu helps keep software dependencies up to date by sending pull requests with updates and related information; users decide whether to merge them. It connects to GitHub and GitLab repositories through their APIs and supports Ruby Bundler, JavaScript npm, Yarn and pnpm, PHP Composer, and Elixir Hex. Update settings can be applied individually, grouped into recurring updates, or limited to security changes. Security vulnerability updates take priority, and Depfu syncs with open-source databases and GitHub security alerts. The service limits open dependency update pull requests to seven at a time. Depfu says it accesses repositories through the GitHub or GitLab API without cloning them, and that service traffic is encrypted with SSL/TLS. It is available on the web, with an Enterprise option running on customer infrastructure alongside GitHub Enterprise or self-hosted GitLab; that option requires Linux, Docker support, at least two CPU cores, and 8 GB of RAM. A free plan covers public and personal account repositories. Paid plans start at $29 per month for five private repositories; the company is headquartered in Hamburg, Germany.
Who it suits
Depfu suits developers and teams who want dependency updates delivered as pull requests and want control over merging them. Its Enterprise deployment may suit organizations that need the service to run on their own infrastructure.
What it does well
- Supports four listed language ecosystems
- Security updates jump ahead of other updates
- Works with GitHub and GitLab repositories
- Free plan covers public and personal repositories
- Enterprise keeps code in the customer’s network
What to know first
- At most seven update pull requests stay open at once
- Starter costs $29 per month
- Enterprise requires Linux and Docker support
- Enterprise requires at least two CPU cores and 8 GB RAM
Limits
The free Open Source/Personal plan covers public and personal account repositories. Starter covers five private repositories, Team 25, and Business 100; Enterprise Starter supports up to 10 developers. Depfu also keeps no more than seven update pull requests open at once.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Open Source/Personal | public and personal account repos · Unlimited dependency updates | Free |
| Enterprise Starter | annually · Up to 10 developers · Unlimited repos · Unlimited dependency updates | $1,200 a year |
| Starter | monthly · 5 private repos · Unlimited dependency updates | $29 a month |
| Team | monthly · 25 private repos · Unlimited dependency updates | $59 a month |
| Business | monthly · 100 private repos · Unlimited dependency updates · Premium Support | $99 a month |
| Enterprise | More than 10 developers · Unlimited repos · Unlimited dependency updates · Premium Support | On request |
As depfu.com lists them, read 1 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Depfu website.
- Choose a plan based on whether repositories are public, personal, or private and on the team size.
- Connect a GitHub or GitLab repository through its API.
- Configure individual, recurring grouped, or security-only updates.
- For Enterprise, prepare a Linux machine or VM supporting Docker, with at least two CPU cores and 8 GB of RAM.
Verdict
Depfu combines configurable dependency update pull requests with security-update prioritization and support for GitHub and GitLab. The free plan is limited to public and personal account repositories, while private repository plans start at $29 per month.
Questions
Is Depfu free?
Yes. Open Source/Personal costs nothing for public and personal account repositories, with unlimited dependency updates.
What do the paid plans cost?
Starter is $29 a month, billed monthly; Team is $59 a month, billed monthly; Business is $99 a month, billed monthly. Enterprise Starter is $1,200 a year, billed annually. Enterprise has no listed price.
Which repositories and ecosystems does Depfu support?
It connects to GitHub and GitLab repositories through their APIs. Supported ecosystems are Ruby Bundler, JavaScript npm, Yarn and pnpm, PHP Composer, and Elixir Hex.
Can I host Depfu myself?
Yes. Depfu Enterprise runs on customer infrastructure with GitHub Enterprise or self-hosted GitLab. It requires a Linux machine or VM supporting Docker, with at least two CPU cores and 8 GB of RAM.
Does Depfu offer a free trial?
A 21-day trial is listed.
How does Depfu handle dependency update requests?
It sends pull requests with dependency updates and related information, and users decide whether to merge them. No more than seven dependency update pull requests are open at once.
Facts from Depfu's own pages
- Encryption
- Depfu says all traffic to and inside its service is encrypted with SSL/TLS. · depfu.com, 1 Oct 2026
- Enterprise deployment
- Depfu Enterprise runs on the customer’s infrastructure with GitHub Enterprise or self-hosted GitLab, and the customer’s code stays in its network. · depfu.com, 1 Oct 2026
- Enterprise requirements
- Depfu Enterprise requires a Linux machine or VM supporting Docker with at least two CPU cores and 8 GB of RAM. · depfu.com, 1 Oct 2026
- Headquarters
- Hamburg, Germany · depfu.com, 28 Sept 2026
- Pull-request limit
- Depfu never has more than seven dependency update pull requests open at the same time. · depfu.com, 1 Oct 2026
- Purpose
- Depfu is an online tool that helps keep software dependencies up to date. · depfu.com, 1 Oct 2026
- Repository integrations
- Depfu connects to GitHub and GitLab repositories through their APIs. · depfu.com, 1 Oct 2026
- Security updates
- Security vulnerability updates jump the queue and Depfu syncs with open-source databases and GitHub security alerts. · depfu.com, 1 Oct 2026
- Source-code handling
- Depfu says it never clones repositories and accesses them through the GitHub or GitLab API. · depfu.com, 1 Oct 2026
- Support
- The maker says its bootstrapped two-person team provides customer service and offers Premium Support on the Business and Enterprise plans. · depfu.com, 1 Oct 2026
- Supported ecosystems
- Depfu supports Ruby Bundler, JavaScript npm/Yarn/pnpm, PHP Composer, and Elixir Hex. · depfu.com, 1 Oct 2026
- Update strategies
- Users can configure individual updates, recurring grouped updates, or security-only updates. · depfu.com, 1 Oct 2026
- Update workflow
- Depfu sends pull requests containing dependency updates and related information while users control whether to merge them. · depfu.com, 1 Oct 2026
Where Depfu stands on Freedom251
- Dependency Management Software#7 of 27