AdRoll/rebar3_depup

This system is a rebar3 plugin designed to automate the updating of dependencies within rebar3-managed Erlang/Elixir projects. It provides a command-line interface to selectively update project dependencies, plugins, or hex packages, with support for configuration-based filtering and SemVer constraints. The implementation includes a test suite to verify these update behaviors and configuration options.

This entry introduces the rebar3\_depup project, a rebar3 plugin designed to update dependencies in rebar3-managed projects. The initial commit establishes the core configuration (rebar.config), specifying a minimum OTP version of 27 and dependencies on hex\_core and verl. It includes the plugin's source code structure, test suite, and documentation (README, CONTRIBUTING, CHANGELOG). The plugin provides a \rebar3 update-deps\ command with options to selectively update deps, plugins, or hex packages, and supports configuration for ignoring specific dependencies or restricting updates by SemVer component.

(repo-wide), src · high confidence

Added the initial Common Test suite (depup\_SUITE.erl) and associated configuration files to verify the rebar3\_depup plugin's behavior, including tests for dependency updates, plugin updates, profile-specific updates, ignore lists, and semver tag resolution.

test · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 61 → 65 (+3.4)
• Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 43 → 51 (+8.8)
• Readiness 78 → 72 (-5.9)
• Security 97 → 99 (+1.5)

• Coverage not measured — no coverage collector is wired up
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Hotspot: src/dep_updater.erl (src/dep_updater.erl)
• Off-boarding risk: anonymized user #1

• Off-boarding risk: anonymized user #1

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

AdRoll/rebar3_depup was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.