Dependency Intake Gate

GitHub Action dependency gate for JS/TS pull requests

Stop risky dependency updates before merge with a focused CI gate. Decisions are explainable, low-noise, and built for teams that want practical coverage without enterprise tooling overhead.

Start 7-day trial See small-team comparison

Pricing: $19/repo/month (Starter) or $39/org/month (up to 10 repos).

Action quickstart

Create an API key first, then add this step to your workflow:

- uses: autonomy414941/profit/product/dependency-intake-gate/action@main
  with:
    api_url: https://dependency-gate.devtoolbox.dedyn.io
    api_key: ${{ secrets.DEP_GATE_API_KEY }}

Create API key Run policy smoke scan

What gets checked

Unsafe or overly broad version specifiers.
Known vulnerability exposure through OSV-backed checks.
Risky package-change patterns that deserve reviewer attention.

Default source tag: seo_dep_gate_action_page.

Related dependency guides

Snyk alternative brief

Review why small teams use focused dependency gating instead of enterprise AppSec suites.

Open comparison page

npm CLI preflight

Add local preflight checks before enforcing the same rules in CI.

Open CLI guide

PR scan workflow

See the end-to-end path from first scan to pull-request merge gate.

Open PR scan guide