How much is Dependabot costing your team?
A free, read-only CLI that measures your Dependabot backlog, your unpatched CVEs, and the engineering hours they take. No PatchWave account needed.
bash -c "$(curl -fsSL https://patchwave.ai/analyze.sh)"Run it in your terminal. It walks you through GitHub access.
What you get.
- Your open Dependabot PRs, how old they are, and how long merges take
- Repositories stalled at Dependabot’s open PR limit
- Unpatched security alerts by severity, with the oldest critical and high ones
- Engineering hours spent each year, with assumptions you can adjust
- How much of that time PatchWave would save
Safe to run.
- Read-only: it calls the GitHub API and never writes to it
- Reads no file contents from your repositories
- The report is a single HTML file that stays on your machine
- Open source, with signed binaries built by GitHub Actions
Wave goodbye to (most) dependency update work.
25 free PRs every month.
Sign up for free
No credit card required.