Deps is a command line tool for staying on top of dependencies. It runs updates, automates pull requests, and keeps your local installations in check.
This repo contains the code for the deps command line tool itself (written in Go),
but each language/ecosystem has it's own repo which often uses the native language and acts as a light wrapper around the native dependency management tools.
This way deps can automate updates using the same tools that you would use in your terminal.
The key features of deps are:
- Native languages and tools: The goal is to wrap the native package managers when possible (npm, yarn, pipenv, composer, etc.), so the updates delivered by deps are the same as updates you would make yourself on the command line.
- Manifests vs Lockfiles: If you use
"react": "^17.0.0"in your package.json, we'll send you a pull request when 18.0.0 comes out. This is an out-of-range update to a direct dependency. But when react 17.1.2 is released, all you need to do is update your lockfile (package-lock.json or yarn.lock). In JavaScript, for example, your lockfile can be outdated daily between all of your direct and indirect (transitive) dependencies. These are in-range updates to direct and indirect (transitive) dependencies, and deps will send you a single rolling pull request to keep your lockfile up-to-date.
- Runs in an environment you control: Deps runs in the same CI environment that you use for testing. You have full control over the container/host and system requirements.
- Pluggable ecosystem: We maintain a set of "official" components, but new or bespoke dependency types can be supported by pointing to a different component repo.
$ curl -sSL https://deps.app/install.sh | bash -s -- -b $HOME/bin- dropseed/deps-python
- dropseed/deps-js
- dropseed/deps-php
- dropseed/deps-git
- dropseed/deps-manual
- dropseed/deps-wordpress-core
- dropseed/deps-wordpress-plugins
- dropseed/deps-wordpress-themes
The license for the command line tool itself (this repo) is TBD. The individual components are all open-source, usually MIT licensed.