Deptic

What it does

Deptic makes software supply chain security effortless. Connect your GitHub repo and we instantly generate compliant Software Bills of Materials (SBOMs) and detect critical CVEs across your dependencies. Stay NTIA and EU CRA compliant with zero friction. Supports npm, pip, Maven, Go. Free for developers!

Deptic automatically generates Software Bills of Materials (SBOMs), detects CVEs across every dependency, and proves NTIA EO14028 and EU CRA compliance. Free for developers. Supports npm, pip, Maven, Go, Rust, Ruby, PHP, .NET.

Gain complete visibility into dependencies, vulnerabilities, and compliance risks. Deptic fetches every manifest file across the entire repository tree — recursively, automatically. Every package — direct and transitive — resolved across npm, pip, Maven, Go, and more. 1,247 components in seconds. Each component matched against NVD and OSV.dev. Critical vulnerabilities flagged with exact patched versions. NTIA EO14028 and EU CRA compliance score. CycloneDX 1.5 and SPDX 2.3 export. One click. Every component matched against NVD and OSV.dev. Critical vulnerabilities flagged instantly with exact patched versions. Point Deptic at any public or private repository. No setup, no agents, no config…from deptic.netlify.app

• 
  deptry 0.14.0 – detect unused Python dependencies up to 10 times faster2024 · github.com · ▲142

  deptry 0.14.0 was just released, bringing significant speed improvements: It is now up to 10 times faster than the previous release! For those unfamiliar with deptry; deptry is a command line tool to check for issues with dependencies in a Python project, such as unused or missing dependencies. GitHub: https://github.com/fpgmaas/deptry For some benchmarks of the new release, see the release notes: https://github.com/fpgmaas/deptry/releases/tag/0.14.0 The performance improvement was achieved by leveraging Rust to parse the AST and extract…

• 
  Dependency CI – Continuous testing for your dependencies2016 · dependencyci.com · ▲198

  SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

• 
  Arnica2022 · arnica.io · ▲97

  Behavior based software supply chain security

• 
  CLI that helps AI agents avoid vulnerable dependenciesJul 2026 · github.com · ▲26

  deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service. I built this because AI coding agents kept suggesting outdated or vulnerable package versions. I kept having to manually tell tools like Claude and Codex to use newer, safer versions. deptrust gives the agent a quick way to verify whether a…

• 
  4smart Packages Overview2021 · ▲75

  Monitor NuGet and NPM packages in your repositories

• 
  Bytesafe2021 · bytesafe.dev · ▲66

  A better way to control your software supply chain

• 
  Run full iOS 16.5 firmware on Android Devices▲518

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 2d ago · github.com

• 
  /dev/null▲492

  a social network for devs

  Dev tools · 5d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 30d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 25d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 23d ago · talanoa.email

• 
  Fundraisly▲1,537

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• 
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• 
  Performative-UI – A react component library of design tropes▲1,181

  Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲976

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲958

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• 
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.

  Life & fun · Jun 2026 · hackernewstrends.com