The best DepsHub alternatives
The rest of Best Dependency Management Software, in this site's order: each with what it costs, where it runs and its record score.
CodeQL suits developers and security researchers who need to analyze code for security and other quality issues.
Renovate suits individual developers and small teams looking for free dependency management, as well as larger organizations with complex dependency…
It suits organizations that need to manage runtime projects and permissions across teams.
Depfu suits developers or teams maintaining dependencies in supported GitHub or GitLab repositories.
Endor Labs suits developers and security teams working with code, open-source dependencies, or AI coding agents.
Snyk Open Source suits development teams managing open source dependencies and security engineers or GRC teams handling policy reporting.
Socket suits development teams seeking dependency checks in pull requests or package installation, as well as open-source projects.
FOSSA suits developers, security teams, and legal counsel working with software dependencies, vulnerabilities, licenses, or SBOMs.
Kusari suits developers, DevSecOps teams, and security teams managing software supply chain risk.
It suits development and security teams that need repository-wide credential detection, push blocking, custom patterns, and remediation workflows.
It suits development and security teams managing software components across projects, from one team to enterprise portfolios.
Marshal suits teams maintaining Maven or Gradle JVM projects that want behavioral checks on dependency updates.
This suits engineering, DevSecOps, legal, compliance and audit teams managing third-party code.