LegacyFixer

LegacyFixer is a self-service GitHub App that scans selected Python repositories for dependency vulnerabilities, records the results, and opens review-ready fix pull requests only when repository settings explicitly allow it. Scans are passive by default, so the first run makes no code changes, and every scan ends with an explicit outcome, including detect-only when no fix PR is appropriate. Each repository controls whether PRs are enabled and how many can be open at once. It works with requirements.txt, nested requirements files, poetry.lock, Pipfile.lock, and setup.cfg install_requires. Pro is $29 a month for up to 10 repositories, with a 7-day free trial for up to 3 repositories and no card needed. Built by Domnita Tudor.