Dependabot is a GitHub-hosted dependency updater; its runner is published as the GitHub Updater Action 111, which runs dependabot-updater inside GitHub Actions. Alternatives that keep dependencies current are Vibgrate, which finds stale and vulnerable dependencies locally 2, and Python-poetry for managing and locking Python dependencies 3.
- 1
GitHub Updater Actiongithub.comverified and signed
Runs the dependabot-updater inside GitHub Actions to keep project dependencies updated, which is the Dependabot update engine 11.
official:library · Updater Action
for agents: github/dependabot-action
- 2
Vibgratevibgrate.comwebsite read, tools not yet checked
Scans a repository locally to show how far the stack has fallen behind and which dependencies have known vulnerabilities 2.
official:MCP server · com.vibgrate/ai-contextpackage · @vibgrate/cliMCP server · com.vibgrate/mcp+1 community tools built for it
- 3
Sources
- 1GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHubgithub.com · read 2026-10-29
- 2Vibgrate — Code Drift Intelligence for software teamsvibgrate.com · read 2026-10-29
- 3Poetry - Python dependency management and packaging made easypython-poetry.org · read 2026-10-29
- 11Updater Action: declares "github/dependabot-action" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
github/dependabot-action · Updater Action verified and signed
Runs dependabot-updater in Actions
sponsor-finder · sponsor-finder verified and signed
Find which of a GitHub repository's dependencies are sponsorable via GitHub Sponsors. Uses deps.dev API for dependency resolution across npm, PyPI, Cargo, Go, RubyGems, Maven, and NuGet. Checks npm funding metadata, FUNDING.yml files, and web search. Verifies every link. Shows direct and transitive
github/dependency-submission-toolkit · Example Dependency Submission Action verified and signed
Example action using the dependency-submission-toolkit and npm
· Vibgrate website read, tools not yet checked
Vibgrate scans your repository on your machine. It shows how far your stack has fallen behind, finds dependencies with known vulnerabilities, and gives your coding agent focused context from the code you actually run. Free, no account, raw source is not uploaded.
dependency · poetry-core verified and signed
· deptry website read, tools not yet checked
A command line utility to check for unused, missing and transitive dependencies in a Python project.
gh-issue-sync · gh-issue-sync verified and signed
Manage GitHub issues locally as Markdown files. Use for triaging, searching, editing, and creating issues without leaving your editor or terminal.
· moonrepo website read, tools not yet checked
From build to deploy, moonrepo is a better way to manage codebases, save developer time, and boost your business.
· GitHits website read, tools not yet checked
Connect your software factory or coding agent to a version-aware index of open-source code, documentation, and package data. Discover, use, debug, and maintain dependencies through one interface.
updateRepositoryPipelineVariable · Bitbucket API verified and signed
Update a variable for a repository
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.