dependabot/dependabot-core
🤖 Dependabot's core logic for creating update PRs. observed · 2026-08-28
Health v2 · maintenance only
95/100
- Activity 99
- Release rhythm 87
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 6
- age_days: 3379
- days_rel: 9
- days_push: 7
- n_releases_24m: 144
Adoption not part of the score
5738 stars · 1499 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Dependabot-Core is the Ruby library powering GitHub's Dependabot automated dependency updates. It resolves and updates dependencies across many ecosystems and generates pull requests with changelogs and release notes.
Use cases
- automatically update project dependencies via pull requests
- keep lockfiles and manifests up to date
- apply security updates for vulnerable dependencies
- run a self-hosted Dependabot on GitLab or Azure DevOps
- update Docker base images and Terraform modules automatically
- generate PR descriptions with changelogs and release notes
When to choose
- you want automated dependency update PRs across many languages
- you need to run Dependabot outside GitHub.com on other forges
- you want resolvable version bumps that respect lockfiles
When to avoid
- you only need vulnerability alerts rather than update PRs
- your package ecosystem is not among the supported ones
- you want a turnkey service rather than a library needing an entrypoint
Facets
library · maturity active
dependency-audit developer-tools workflow-automation ci-cd developer-tools version-control security cloud dependency-updates automated-pull-requests supply-chain-security lockfiles multi-language github-app automation docker github gitlab azure-devops bitbucket
2 sources
- readme: https://github.com/dependabot/dependabot-core · fetched 2026-08-28 · ae5274f09380
- homepage: https://docs.github.com/en/code-security/dependabot · fetched 2026-08-29 · 60db4ce53a73
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| dependabot/dependabot-core | main | 95 |
For agents
markdown · JSON · MCP: product_card(name="dependabot/dependabot-core")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem