Andriy Semenets

DepsHub - Update dependencies using AI

DepsHub is an AI-powered tool for developers to help keep your repositories up to date and secure. Want to migrate to a new major version of any library? Do it in seconds with DepsHub.

Add a comment

Replies

Best
André J
Really cool. Would love to add this to some of my open source repos. How hard would it be to add support for signing in with email instead of GitHub? The use case would be for dependency graphs for public open source projects. I just try to avoid signing in with GitHub. It's so hard to manage privileges on GitHub.
Andriy Semenets
@sentry_co Interesting suggestion. I haven't investigated much, but I don't think it should be that complicated (unless GitHub bots don't support signing as another user 🤔)
Tony Han
I gotta say, the reason I'm supporting this product is because this is built by a solo founder and we honestly need more of them. Things I love: the landing page is well polished, the tagline is straight forward, and the UI looks slick! I'm not super technical, so I don't fully understand its capabilities, but I did some research against dependabot, and I found DepsHub is much more comprehensive and streamlined - there are features like license compliance checking which is super cool and other analytics that come with the tool. I'm sure I'm missing some, but it has tons of tools in its belt. Congrats @semanser! It's incredible that you built an awesome product that focuses on a large niche area.
Andriy Semenets
@tonyhanded Thank you a lot, Tony!
Majid Izadi
Gratz on the launch, cool idea, great execution, really liked UI/UX too, is it all by your self? waiting for Scala and C support, good job man, has room for tons of new features.
Andriy Semenets
@m4jiz Thank you! Yes, everything (design/frontend/backend) was done by myself :)
Majid Izadi
@semanser truly mazing, best wishes for you man
Ishaq Oyiza
My code is secure and up-to-date without lifting a finger.
Andriy Semenets
@ishaq_oyiza It's hard to do if you're using any library tho ;)
Burcin S.
Hey Andriy! Congrats on the launch, it looks like a great tool for developers!
Andriy Semenets
@customcraftbot thanks for your support!
mohamed abueldahab
I think it's impressive tool to manage my packages.
Andriy Semenets
@mohamed_abueldahab1 Thanks, Mohamed!
Jack Michalak
Congrats on the launch! I'm very curious to know how the AI makes changes to the code that are necessary for the update. In my experience LLMs are only very good at library versions that have been released for sometime, so updating code for the new version would be difficult. I imagine that some libraries will provide release notes and a migration guide, so RAG would help some, but again in my experience there are changes that must be made that aren't mentioned in these. Does it look at build failures in GitHub Actions or equivalent and try to resolve them? Fixing UI bugs introduced by an upgrade seems impossible.
Andriy Semenets
@jack_michalak Thanks for the question! In this case, LLMs rely on the change logs/release notes to identify what kind of changes are included in the release. Of course, semantic versioning is also important here even though I agree that not all developers follow the standard. Also, we're planning to integrate more data points (bug reports for the library, etc.). While it doesn't guarantee 100% coverage in cases, it drastically improves time on maintaining your repositories at scale since the only thing that you need to do is to review the code changes. We're trying to include as much information as possible in the PR, but in the end, the developer is making the final call on whether it's worth merging it or not. It doesn't check the CI yet, but can be a nice idea. I like the idea of having iterative updates - starting from the minimum possible update and checking if the update was successful (tests, CI, etc.). If it was - rinse and repeat. Thanks for the question and the feedback!
Daniel Zaitzow
@semanser really neat tool for the dev environment - I like that 'reduce noise' differentiator. As a no code individual, it likely won't be a product for me but I have relayed it over to our development team to check out! Congrats on the launch!
Andriy Semenets
@dzaitzow thanks!
Daniel Zaitzow
@semanser no stress! Looks slick!
Kanan Mikayilov
Hey Andriy! It's fascinating to see creators deeply involved in the issues they're tackling. It truly reflects your dedication as a maker. I'm thrilled to see you addressing this so effectively! Big congratulations!
Andriy Semenets
@mkylv thanks for your feedback!
Edward
Hey Andriy! Congratulations on the launch, this looks great! Question: sometimes my team gets busy and we let our dependency manager PRs get a bit stale over time. Is this product able to deal with those cases when updated changes are required since the time that DepsHub opened a PR for a package?
Andriy Semenets
@edwardb Good question! This is not implemented yet, but there is a simple trick to make it work: just close the PR and open one using the DepsHub dashboard. We will prioritize implementing this for sure. Thanks!