Rivet
How it worksPricingContact
Scan a repoPricing

SEE

Scan a repositoryThe real advisory report on any public repo, no install, no accountReachabilityWhich advisories touch code you actually call, and which do notFleet viewHundreds of repositories, and which of them are at risk right now

FIX

Transitive upgradesThe packages in nobody's manifest, moved the cheapest way that worksHeld to your testsYour suite is the oracle, and it cannot be edited to passWatch modeOpt in per repository: patch and minor on their own, majors ask

SHIP

One draft PRPer repository, not per advisory, or an honest noItemized costEvery model call and sandbox second on the receipt

Try it first

Scan a public repository

github.com/

psf/requests

Get the report

Python and npm, direct and transitiveDraft pull requests only, never a merge

A person reads these

Get in touch.

One address, and it is monitored by the person who builds this. There is no ticket system and no chat widget, mail is faster than either.

[email protected]

Support

A run behaved in a way you did not expect, or Rivet declined something you think it should have fixed.

Include the repository, the run, and what you expected instead.

A bad pull request

It opened a pull request whose diff is wrong. This is the most useful mail we can get, the pipeline is judged on exactly this.

Link the pull request. Do not merge it.

Security

A vulnerability in Rivet itself. Report it privately first and give us a chance to fix it before it is public.

Please do not open a public issue for this.

Delete my data

Have your account and every run belonging to it removed. We will confirm when it is done.

Send it from the address on your account.

For what we do with what you send us, see the privacy notice. For what the service promises, see the terms.

Rivet

Upgrades the vulnerable dependencies in your repositories, fixes what the upgrade breaks, and hands back one draft pull request. Merging stays yours.

Product

  • Scan a repository
  • Reachability
  • What it does
  • How it works
  • Pricing

Company

  • Contact
  • Support
  • Terms
  • Privacy

Built on

  • Nebius Token Factory
  • NVIDIA Nemotron
  • Token Factory Sandboxes
  • Tavily
  • OSV.dev

© 2026 Rivet · MIT licensed

TermsPrivacySign in