Instead of DepsHub
DepsHub alternatives
DepsHub combines dependency upkeep with license and security checks. Autopilot finds newer versions and opens pull requests, while smart scheduling keeps updates reasonably fresh without unnecessary churn. AI updates can handle major upgrades automatically, and monorepo support covers multi-language projects. It also monitors license changes, provides license details, exports CycloneDX SBOMs, and scans for known vulnerabilities. Integrations include GitHub, GitLab, Bitbucket, Linear, Jira, and Zapier. Open-source repositories and personal projects can use free access, while Professional costs $19 per month.
- 1
ActiveState Platform
Free plan APILinuxMac+2Custom runtime builds and deployment instructions — ActiveState Platform builds custom runtimes from source instead of focusing on DepsHub’s dependency update and scanning workflow.
- 2
Sonatype Nexus Repository
Free plan APILinuxMac+3Enterprise artifact and package repository management — Nexus Repository stores and distributes applications, models, packages, and build artifacts across more than 20 formats.
Pricing on request Visit site - 3
Endor Labs
Free plan APIExtensionLinux+4Application security and coding-agent governance — Endor Labs adds AI SAST, secrets detection, malicious-package blocking, agent inventories, and policy enforcement beyond DepsHub’s dependency focus.
- 4
Snyk Open Source
Free plan APILinuxMac+2Prioritized open-source vulnerability remediation — Snyk adds reachability-based risk scoring, one-click remediation pull requests, CI/CD guardrails, and continuous policy reporting.
- 5
Socket
Free plan APIExtensionLinux+4Blocking malicious packages before installation — Socket blocks malicious direct and transitive dependencies at package-manager, pull-request, CI, and production stages.
- 6
OSS Review Toolkit
Free plan LinuxMacSelf-hosted+1Open-source policy automation and SBOM reporting — ORT is a free, self-hosted policy-as-code toolkit that generates CycloneDX and SPDX outputs across many package managers.
- 7
Updatecli
Free plan LinuxMacSelf-hosted+1Free, manifest-driven update automation — Updatecli uses YAML manifests and a standalone binary to update files and create pull or merge requests without a server or database.
- 8
Renovate
Free plan Open source APISelf-hostedWeb - 9
FOSSA
Free plan APILinuxSelf-hosted+1 - 10
GitHub CodeQL
Free plan ExtensionLinuxMac+3 - 11
Depfu
Free plan Self-hostedWeb - 12
GitHub Secret Scanning
Free plan APISelf-hostedWeb - 13
Kusari
Free plan APIWeb - 14
OWASP Dependency-Track
Free plan APISelf-hostedWeb - 15
Marshal
Free plan Self-hosted - 16
Black Duck SCA
Paid APILinuxMac+3 - 17
FossID Workbench
Paid APILinuxSelf-hosted+1 - 18
Mend SCA
Paid APILinuxMac+3 - 19
Sonatype Guide
Free plan Web - 20
JFrog Xray
Paid APISelf-hostedWeb - 21
StackRadar
Free trial APIWeb - 22
Lineaje Open Source Manager
Paid APIWeb - 23
Checkmarx SCA
Paid Web - 24
Revenera Code Insight
Paid LinuxWebWindows - 25
Veracode SCA
Paid LinuxMacWeb+1
You may still prefer another tool for runtime management, artifact storage, broader policy automation, malicious-package blocking, or a fully open-source toolkit. DepsHub supports JavaScript, Python, Go, Rust, Java, and PHP across Linux, macOS, Windows, and the web. Before switching, compare package ecosystems, deployment options, pull-request workflows, security scope, license controls, SBOM formats, and integrations. Check whether you need self-hosted operation, CI or CLI use, agent governance, or monitoring beyond dependency updates. Pricing also matters: alternatives range from free projects to plans starting at $25 per month or quote-based offerings.
← Back to DepsHub The whole dependency management software list