Skip to content

Here's what's popular on GitHub today...

The Download

Join rotating hosts from GitHub’s Developer Advocacy team - including Andrea Griffiths, Cassidy Williams, Kedasha Kerr, and more for the latest in developer, open source, and GitHub news.

JavaScript logo

Popular topic

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Depfu screenshot

This recommendation was created by GitHub staff

Depfu

Depfu is the best way for busy teams to keep their app dependencies up-to-date. We believe doing small, easy to assess updates regularly and supported by automation is a lot easier than falling behind and having to update everything at once.

We support all Ruby projects using Bundler, all JS projects using npm or Yarn, all Elixir projects using Hex and all PHP projects using Composer. Lock files are handled automatically.

View Depfu website

This recommendation was created by GitHub staff

Semgrep

Semgrep is a fast, open-source, static analysis engine for finding bugs, detecting dependency vulnerabilities, and enforcing code standards. With 2,000+ built-in rules and easy-to-create custom ones, it finds the bugs that matter.

  • Open source engine, works on 25+ languages
  • Scan with 2,000+ community rules
  • Write rules that look like your code
  • Quickly get results in the terminal, editor, or CI/CD
  • Flag issues and get results in pull requests, Slack, + more