LegacyFixer

LegacyFixer is a security-focused Python dependency scanning tool designed for developers and DevOps teams prioritizing application security. Operating seamlessly as a GitHub App on Google Cloud Run, it offers vulnerability detection with an emphasis on safety—reporting issues even when automated fixes are not suitable. Unlike traditional dependency managers, LegacyFixer intelligently determines when to create fix pull requests based on policy and validation checks, ensuring that changes are both secure and appropriate. Its clear, outcome-driven reports include explicit 'detect-only' results when no action is necessary, helping teams understand their security posture without unnecessary noise. This tool is ideal for organizations that need precise security insights for Python dependencies while maintaining control over automated updates, making it a valuable addition to secure CI/CD workflows.