LegacyFixer
Python dependency security scans with optional fix PRs
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Read the full description
Compared with Dependabot and Renovate, LegacyFixer focuses on security-first scanning of Python dependencies. It reports vulnerability findings even when an automated fix is not appropriate, and creates a fix pull request only when its policy and validation checks allow it. Each scan produces an explicit outcome, including detect-only (NO_ACTION) when no fix PR is created. LegacyFixer runs as a GitHub App on Google Cloud Run.
Visit website ↗ Source listing ↗
PH · launched Oct 14, 2026 · 60 upvotes (top 3%)
- Security
- Dev tools
- Developer
- Not AI
- Commercial product
- Developer Tools
- GitHub
- Security
- Google Cloud Run
Similar launches
See all 93 similar launches →Could you build this?
Partial Scanning dependencies against vulnerability databases is a wrappable API task, but generating fix PRs that are validated by running tests and applying policy is harder to get right.
What it would actually take: The scanner can be built on vulnerability feeds such as OSV or PyPI advisories, with a GitHub App for PRs. The hard part is the validation engine: resolving Python dependency constraints, sandboxing installs and test runs, and deciding safely when a fix is appropriate, which requires packaging and security expertise.
Competitors
Other products that read as similar to this one : 93 launches clear the similarity bar, closest 8 shown.
Attention rank: #2 of 94 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 339 days after the earliest competitor.
- Drift — Dependency Upgrades · ph · 2026-09-29 · 2 upvotes · similarity 0.43
- Mantle · ph · 2026-09-09 · 1 upvotes · similarity 0.43
- RepoMap · ph · 2026-10-01 · 2 upvotes · similarity 0.42
- Railo · ph · 2026-09-12 · 1 upvotes · similarity 0.42
- DeployDoctor · ph · 2026-10-03 · 1 upvotes · similarity 0.42
- CLI that helps AI agents avoid vulnerable dependencies · hn · 2026-07-01 · 26 upvotes · similarity 0.42
- CommitGate · hn · 2026-06-21 · 5 upvotes · similarity 0.41
- DepSentinel · ph · 2026-10-19 · 3 upvotes · similarity 0.39
Other launches for this product
- No other launches for this product.