Launching today

LegacyFixer

Launching today

Python dependency security scans with optional fix PRs

13 followers

Python dependency security scans with optional fix PRs

13 followers

Visit website

Security software

Compared with Dependabot and Renovate, LegacyFixer focuses on security-first scanning of Python dependencies. It reports vulnerability findings even when an automated fix is not appropriate, and creates a fix pull request only when its policy and validation checks allow it. Each scan produces an explicit outcome, including detect-only (NO_ACTION) when no fix PR is created. LegacyFixer runs as a GitHub App on Google Cloud Run.

Free Options

Launch tags:Developer Tools•GitHub•Security

Launch Team / Built With

Dropbox SignSimple, secure eSignatures for the way your team works.

Promoted

Google Cloud Run

Google Cloud Run Hackathon

How did you use Cloud Run for this launch?

LegacyFixer

Maker

LegacyFixer is a GitHub App for Python dependency security scanning and optional automated remediation, built on Google Cloud Run. Cloud Run hosts the API that handles GitHub webhooks and scan requests, a scheduled worker that processes queued scanning jobs, and a separate isolated fix executor for dependency remediation. Cloud Scheduler triggers the worker, while Cloud SQL (PostgreSQL) stores scan jobs and results. The architecture separates request handling, background processing, and remediation. Dependency updates are proposed through GitHub pull requests only when enabled for a repository. LegacyFixer never automatically merges pull requests. The production workflow was validated end-to-end on October 13, 2026: scan #201 completed successfully, produced a detailed vulnerability report, and created a reviewable GitHub pull request updating a vulnerable Python dependency.

Report

6h ago

LegacyFixer

Maker

📌

Hi Product Hunt! LegacyFixer began without a business plan or even a product idea. I was curious about AI and wanted to explore one question: Could someone without formal programming education build a real software product by working side by side with AI? From February to August 2026, I worked with ChatGPT to find out. We discussed architecture, made technical decisions, wrote and revised code, investigated failures, and tested repeatedly. I didn't hand the project to an autonomous AI agent. Codex helped mainly with code reviews and testing. It wasn't easy. We first ran the application on a separate server, then migrated it to Google Cloud Run and moved PostgreSQL to Cloud SQL. There were mistakes, unexpected problems, and a great deal to learn. What surprised me was how much I loved the process. Some nights I worked until midnight, completely absorbed in what we were building. The experiment had become something personally meaningful. Today, LegacyFixer is a working GitHub App that scans Python dependencies for security vulnerabilities and creates controlled fix pull requests only when its validation checks allow. Otherwise, it reports findings without changing the repository. I'm here for technical feedback, critical evaluation, and real-world use cases. LegacyFixer exists because a human and AI worked side by side. Thanks for taking a look!

Report

4d ago