Launching today
LegacyFixer
Python dependency security scans with optional fix PRs
12 followers
Python dependency security scans with optional fix PRs
12 followers
Compared with Dependabot and Renovate, LegacyFixer focuses on security-first scanning of Python dependencies. It reports vulnerability findings even when an automated fix is not appropriate, and creates a fix pull request only when its policy and validation checks allow it. Each scan produces an explicit outcome, including detect-only (NO_ACTION) when no fix PR is created. LegacyFixer runs as a GitHub App on Google Cloud Run.
Products used by LegacyFixer
Explore the tech stack and tools that power LegacyFixer. See what products LegacyFixer uses for development, design, marketing, analytics, and more.
Engineering & Development 3
Engineering & Development 3
Codex 3.0 by OpenAICodex can now build, test & debug on autopilot
5.0 (110 reviews)
OpenAI Codex has been a valuable development tool for LegacyFixer. We used it to analyze and improve existing code, implement features, debug issues, and develop automated tests. Its ability to work with complex codebases and support iterative development helped us accelerate implementation while maintaining control over code changes and validation.
Google Cloud PlatformA suite of cloud computing services by Google
5.0 (219 reviews)
We chose Google Cloud Platform for its managed infrastructure and seamless integration between services. LegacyFixer uses Cloud Run to execute its services, Cloud SQL for persistent data, and Secret Manager for secure credential management. These services allow us to deploy, scale, and maintain our GitHub App without managing dedicated servers, while keeping the architecture modular and operational costs under control.
GitHubHow people build software
5.0 (729 reviews)
GitHub is central to how LegacyFixer works. Its GitHub App integration allows us to securely connect repositories, automate dependency security scans, and create optional fix pull requests directly within developers' existing workflows. This native integration makes security maintenance simpler, without requiring developers to switch platforms or adopt additional tools.
LLMs 1
LLMs 1
ChatGPT by OpenAIGet answers. Find inspiration. Be more productive.
4.9 (752 reviews)
I chose ChatGPT for its ability to support complex, iterative problem-solving across different technical domains. It has been a central part of developing LegacyFixer, from architectural design and security decisions to debugging, testing, cloud infrastructure, and launch preparation.
What I value most is the sustained technical collaboration: exploring alternatives, challenging assumptions, identifying problems, and refining solutions through continuous dialogue. This has allowed me to develop and manage a complex software product while retaining control over the decisions and implementation.