Hey PH, I'm Mico, built DepTend solo, on a zero budget, over the past few months. The problem: GitHub tells you what's vulnerable, not what to fix first. A repo with a dozen open alerts and no ranking just means you fix whichever's easiest. DepTend ranks the fixes instead, by impact, effort, and how much the package matters to its ecosystem, and shows the math behind every score instead of a bare number. It reads npm, PyPI, and Go repos, pulls advisories from OSV, and produces a ranked mission list. There's also a CLI if you'd rather run the same scoring locally than submit a repo to a hosted dashboard. The part I'd actually like feedback on: whether the scoring matches how real maintainers prioritize in practice. And I'll say upfront, every mission currently shows low confidence, two scoring inputs don't have a data source wired up yet, so it stays conservative rather than pretending to more precision than it has. Free to use, code's open, no paywall anywhere in the stack. Would love to hear what's missing.

DepTend

Turn dependency alerts into ranked, explainable fixes

Turn dependency alerts into ranked, explainable fixes