Deptic

What it does

Deptic makes software supply chain security effortless. Connect your GitHub repo and we instantly generate compliant Software Bills of Materials (SBOMs) and detect critical CVEs across your dependencies. Stay NTIA and EU CRA compliant with zero friction. Supports npm, pip, Maven, Go. Free for developers!

• D0
  deptry 0.14.0 – detect unused Python dependencies up to 10 times faster2024 · github.com · ▲142

  deptry 0.14.0 was just released, bringing significant speed improvements: It is now up to 10 times faster than the previous release! For those unfamiliar with deptry; deptry is a command line tool to check for issues with dependencies in a Python project, such as unused or missing dependencies. GitHub: https://github.com/fpgmaas/deptry For some benchmarks of the new release, see the release notes: https://github.com/fpgmaas/deptry/releases/tag/0.14.0 The performance improvement was achieved by leveraging Rust to parse the AST and extract…

• 
  Arnica2022 · ▲97

  Behavior based software supply chain security

• CT
  CLI that helps AI agents avoid vulnerable dependenciesJul 2026 · github.com · ▲26

  deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service. I built this because AI coding agents kept suggesting outdated or vulnerable package versions. I kept having to manually tell tools like Claude and Codex to use newer, safer versions. deptrust gives the agent a quick way to verify whether a…

• SZ
  SecureBuild – Zero-CVE Images That Pay OSS Projects2025 · securebuild.com · ▲40

  We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…

• 
  DeptoolsJun 2026 · deptools.io · ▲9

  Scan. Score. Decide. One platform for every dependency

• CA
  Chainloop, A Software Supply Chain Attestation solution devs won't hate2023 · github.com · ▲45

  Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…

• 
  Dograh▲592

  The open source VAPI alternative

  Dev tools · 25d ago · dograh.com

• 
  Meridian▲530

  Don't let your work go unnoticed. Get promoted!

  Dev tools · 20d ago · meridiona.com

• 
  x1▲516

  Lovable for iPhone apps go from idea to App Store

  Dev tools · 11d ago · x1.new

• 
  The GTM Co-Founder▲402

  Open-source GTM skills for technical founders

  Dev tools · 29d ago · gtmcofounder.com

• 
  Open-Source eInk Bike Computer▲398

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 2d ago · opentrailpaper.com

• 
  Nuphos▲380

  The AI-Native DevOps Workspace.

  Dev tools · 24d ago · nuphos.ai

• 
  Fundraisly▲1,544

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• H6
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• PU
  Performative-UI – A react component library of design tropes▲1,181

  hope you enjoy

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲977

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲962

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• IM
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Life & fun · Jun 2026 · hackernewstrends.com