DepsHub review
A broad dependency governance toolkit with automated updates and repository-wide visibility.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
DepsHub is a dependency management tool for development teams and open-source projects that need more than update automation. It scans for inconsistent, unused, or unmaintained packages, known vulnerabilities, and license issues, then can create pull requests for dependency updates. Its coverage also includes CycloneDX SBOM export, configurable linting rules, cross-repository dependency views, and support for multiple languages, package managers, repositories, and monorepos. Teams that want dependency hygiene alongside security and compliance checks are the clearest fit.
Pricing is structured around a free Open Source plan, a Professional plan priced at $19 per code contributor per month with monthly billing, and a custom Enterprise plan. Open Source includes unlimited public repositories, unlimited team members, unlimited security alerts, basic integrations, and basic chat support. Professional adds unlimited public and private repositories, unlimited team members, unlimited security alerts, unlimited integrations, and 24/7 chat support. The per-contributor model suits teams that want broad repository coverage without a project-based limit, while organizations planning advanced commercial requirements may need to discuss the custom Enterprise tier.
DepsHub fits teams working across common repository and collaboration systems: integrations include GitHub, GitLab, Bitbucket, Linear, Jira, Zapier, and Slack. The open-source single-binary CLI can run locally and in CI/CD pipelines, while the hosted service monitors repositories and opens update pull requests. Windows, macOS, Linux, and API access are supported, and self-hosted deployment is included in its category coverage. Choose it when governance, vulnerability scanning, licensing, SBOMs, and updates belong in one workflow. Teams seeking only a lightweight update bot may find its broader governance feature set unnecessary.
DepsHub pros and cons
- Where it wins
- Automates dependency update pull requests with scheduling and grouping
- Combines linting, vulnerability alerts, license checks, and SBOM export
- Supports GitHub, GitLab, Bitbucket, CLI, and CI/CD workflows
- Where it doesn't
- Professional pricing is per code contributor per month
- Open Source has basic integrations and basic chat support
- Enterprise uses a custom plan rather than published pricing
DepsHub fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update