Infield

Infield is a service that helps engineering teams keep their open source dependencies up to date without the usual manual effort. It addresses the challenge of managing constant version releases, which can lead to security vulnerabilities, compliance issues, and dependency lock-in if left unaddressed. The product combines automation with expert human intervention to make the upgrade process safer and more reliable.

The service connects to a user's codebase through a GitHub app or a CLI tool, syncing dependencies from the local environment or CI pipeline. It then calculates a living upgrade plan that accounts for risk, effort, and the relationships between direct and indirect dependencies. Infield supports Ruby, JavaScript, TypeScript, and Python, with Java support planned. It offers a done-for-you managed service, where a team of expert developers performs the upgrades, as well as software-only plans for teams that prefer to handle the work themselves.

Infield is designed for engineering teams that need to manage dependency upgrades at scale, including those with internal teams already responsible for dependencies. The service is available through a free trial, and users can choose between the fully managed white-glove service or self-serve software plans.