LegacyFixer

Meet LegacyFixer

LegacyFixer checks Python repositories for dependency security issues and records the results without immediately changing the code. Teams install its GitHub App on selected repositories, then begin with passive scans to understand the findings before enabling automated fixes. It recognizes common dependency files, including requirements files, Poetry projects, Pipfiles, and setup configuration.

When a repository allows fixes, LegacyFixer prepares changes on separate branches and opens pull requests for human review. Repository controls determine whether this can happen and limit how many requests remain open. The workflow is intended for maintainers who want recurring dependency checks and reviewable updates while keeping control over changes and notification volume.