alvesjtiago

Thanks :) I'm not sure if there's one for React but we may consider building it for React as well in the future if people find it helpful.

Thank you for the kind words :)

Thanks! The ranking takes into account the last commit date, the project creation date, the number of forks, stars and open issues, and a couple of other metrics with smaller impact. We will be writing about it soon and showing it on the website :) Also, you can get a few more metrics inside the project view, including github info and npm stats as well as npms ranking (these two are only available for npm packages for obvious reasons :)).

Those ideas are awesome, we will definitely work on providing those two sections and an overall ranking. Thank you once again!

Hi ibdf, this is a platform to collect and discuss scientific articles. On the landing page you can see some examples of public collections such as Basic Income (http://www.sci-share.com/collections/experiments-in-basic-in...).

SciShare was born to bring a more open and social experience to reference managers such as Mendeley and Papers. If you have a chance to try it out, it would be great to get your feedback.

I've been using Rails for quite some time and recently built a couple of different projects using it (still my favorite framework):

- Communities List (http://www.communitieslist.com/) & Closeknit (http://www.closeknit.co/) for finding and building communities;

- 24agenda (https://www.24agenda.com/en) an appointment management solution currently deployed in Portugal;

- SciShare (http://www.sci-share.com/) a scientific reference management platform;

- Octotrack (https://www.octotrack.com/) a dependency and security manager for rails projects;

Hi raresp, we don't have any access to any of your code, that was the main objective when compared to other similar services.

You have two ways to update your dependencies:

1. Manually upload your gemfile.lock.

2. Intall a post-commit hook which only sends the gemfile.lock in case it was changed.

It would be great if you could try it out.

Thank you.

Hi Cameron, that's a great suggestion. I've just created a public issue tracking repository on github - https://github.com/Octotrack/issue-tracker. It would be great to get all your feedback.

Regarding pricing, this is a new public page with the pricing since it was only available after you logged in - https://www.octotrack.com/pricing.

Thank you

A couple of differences might be:

1. Shows dependencies relationships

2. Automatic updates without the need to request access to the whole project (via git post-commit hook)

3. Analysis of most used dependencies on all your projects

4. Daily emails divided per project instead of dependency / gem

5. Cheaper and with 1 free private project

This is a new project so all feedback is more than welcome. I'm looking to develop everything that makes the platform better and helps every developer and tech team.

Changed it again to only read access to user email. Thank you for reporting that issue.

Google still suggests "Octatrack" when typing "Octotrack", but I hope I can change that in the future :) thanks

Now forcing https. Thank you for the feedback!

Dependabot is an awesome app!

Most of the times I just want to know about a new release and not actually have a PR created for it. I'm also not sure if dependabot warns about vulnerabilities. Nevertheless, I believe they can be used in conjunction and not as a replacement.

You're absolutely right. I've just removed all access to public repositories, including reading.

Now the only information shared is the user's public information.

Thank you

You're right. Just changed to simple html not to get everyone distracted :)

Thank you Filipe :) I hope that not too many hours were added!

Hi Cameron, thank you for your feedback.

Octotrack is not requesting full access to Github, only to the public information and inherently public repos. But nothing concerning private information, that was one of the main objectives.

It would be great if you could try it out. Thank you :)

Hi Andrew, I was also a bundler-audit user myself. Unfortunately bundler-audit only provides information about security vulnerabilities and does not help you keep your dependencies updated.

With Octotrack you'll receive an email digest every morning informing you of the latest updates of the gems you use as well as possible vulnerabilities recently discovered.

Please let me know if this is valuable information for you.

Thank you very much for your feedback.

Thank you for your feedback avitzurel!

I'll provide a sample report on the landing page, add a way to expand the screenshots and provide more information on the sign up process. Octotrack does not access the repositories directly, that was one of the main objectives. Only your email and github public information. Once you create a project, you'll have the option to upload a Gemfile.lock or add a git post-commit hook to your project. From then on, you'll have access to the security vulnerabilities that exist and what dependencies need to be updated as well as other information (such as release notes, etc).

Once again, thank you for the feedback and hope it solves a real pain.

You're absolutely right, I'll make it more explicit. Thank you so much for the feedback.

Thank you, just fixed. Did you have a chance to try it out?

The dependency security features really do look awesome. I've been working on a project called Octotrack (http://octotrack.tiagoalves.me) for a while now whose objective is exactly that with other features for dependency management (currently only available for projects that use Bundler/Gemfile). It would be great to get your feedback.

Hi, I've recently started a new project called Octotrack (http://octotrack.tiagoalves.me) with two main goals:

1) Manage dependencies (right now only gems) showing security issues (CVEs), gem version comparisons, release notes, etc; 2) Daily newsletter to find the best repositories on Github (starred repos from the people you follow, daily trending repos and new releases of repos you've starred);

It is still a very early project so it would be great to get your feedback.

Thank you