neophile#
neophile is a dependency scanner.
It looks through a repository for declared dependencies, attempts to determine if those dependencies are out of date, and generates a report.
It was written to fill gaps betwen GitHub dependabot and WhiteSource Renovate.
neophile can find outdated dependencies and optionally update them for Helm charts, references to Kustomize resources, pre-commit hooks, and frozen Python dependencies that use make update-deps.
neophile only checks whether a dependency is out of date. It doesn’t attempt to determine whether the newer version has security fixes, is a major or minor change, is part of a different line of development, or other practical complexities. Its results should always be examined by a human rather than applied blindly.
See SQR-042 for more details about the problem statement and the gap that neophile fills.
neophile is developed on GitHub.