Rivet is a dependency upgrade tool operated by Bytkit. It upgrades Python and npm dependencies, edits code affected by breaking changes and runs the repository’s tests before opening one draft pull request. It handles direct and transitive dependencies and never merges changes.
Rivet runs repository copies in Nebius Token Factory Sandboxes to install dependencies, apply upgrades and execute tests. It checkpoints the repository, runs its tests untouched before upgrading and restores the checkpoint when an attempt dead-ends. NVIDIA Nemotron models served through Nebius Token Factory plan upgrades, edit code and review diffs. After upgrading, Rivet re-audits the lockfile and a second model reviews the winning diff and advisory.
Its privacy notice states that sandbox execution and inference use European Union endpoints. Tavily Search + Extract finds changelogs and migration guides for upgrades. Each retrieved page is stored and cited on the pull request. Rivet also offers self-hosting with customer-supplied provider keys and configurable model and sandbox endpoints.
Rivet checkpoints repositories in Token Factory Sandboxes, runs untouched tests before upgrades and restores checkpoints when attempts dead-end. After re-auditing the lockfile, a second Nemotron model on Nebius Token Factory reviews the winning diff and advisory. Pages retrieved through Tavily Search + Extract are stored and cited on the pull request.
Rivet product and implementation overview18 Oct 2026 · Rivet · Web pageRivet checkpoints repositories in Token Factory Sandboxes, runs untouched tests before upgrades and restores checkpoints when attempts dead-end. After re-auditing the lockfile, a second Nemotron model on Nebius Token Factory reviews the winning diff and advisory. Pages retrieved through Tavily Search + Extract are stored and cited on the pull request.
Rivet commercial plans
18 Oct 2026 · Rivet · Web page
Rivet states that every plan runs upgrades in Token Factory Sandboxes. Its Team plan includes managed Token Factory Sandboxes and Tavily research.
Rivet commercial plans18 Oct 2026 · Rivet · Web pageRivet states that every plan runs upgrades in Token Factory Sandboxes. Its Team plan includes managed Token Factory Sandboxes and Tavily research.
Rivet privacy notice
18 Oct 2026 · Rivet · Web page
Rivet identifies Nebius Token Factory as the provider serving its Nemotron upgrade models and Tavily as the provider searching for and extracting upgrade documentation.
Rivet privacy notice18 Oct 2026 · Rivet · Web pageRivet identifies Nebius Token Factory as the provider serving its Nemotron upgrade models and Tavily as the provider searching for and extracting upgrade documentation.
Rivet, operated by Bytkit, is a dependency maintenance tool for developers and software teams using GitHub. It scans repositories for vulnerable packages, upgrades direct and transitive dependencies, and edits application code affected by breaking changes. It supports Python and npm ecosystems, researches migration guidance, and runs the repository’s existing tests in a sandbox before opening one draft pull request. Its GitHub bot supports requested fixes and automatic monitoring, while a fleet dashboard helps teams manage multiple repositories. Rivet leaves review and merging to users.
Rivet upgrades repository dependencies, fixes code affected by upgrades and opens draft pull requests. · Developer tools
How they use Nebius and Tavily
Rivet is a dependency upgrade tool operated by Bytkit. It upgrades Python and npm dependencies, edits code affected by breaking changes and runs the repository’s tests before opening one draft pull request. It handles direct and transitive dependencies and never merges changes.
Rivet runs repository copies in Nebius Token Factory Sandboxes to install dependencies, apply upgrades and execute tests. It checkpoints the repository, runs its tests untouched before upgrading and restores the checkpoint when an attempt dead-ends. NVIDIA Nemotron models served through Nebius Token Factory plan upgrades, edit code and review diffs. After upgrading, Rivet re-audits the lockfile and a second model reviews the winning diff and advisory.
Its privacy notice states that sandbox execution and inference use European Union endpoints. Tavily Search + Extract finds changelogs and migration guides for upgrades. Each retrieved page is stored and cited on the pull request. Rivet also offers self-hosting with customer-supplied provider keys and configurable model and sandbox endpoints.
Rivet checkpoints repositories in Token Factory Sandboxes, runs untouched tests before upgrades and restores checkpoints when attempts dead-end. After re-auditing the lockfile, a second Nemotron model on Nebius Token Factory reviews the winning diff and advisory. Pages retrieved through Tavily Search + Extract are stored and cited on the pull request.
Rivet product and implementation overview18 Oct 2026 · Rivet · Web pageRivet checkpoints repositories in Token Factory Sandboxes, runs untouched tests before upgrades and restores checkpoints when attempts dead-end. After re-auditing the lockfile, a second Nemotron model on Nebius Token Factory reviews the winning diff and advisory. Pages retrieved through Tavily Search + Extract are stored and cited on the pull request.
Rivet commercial plans
18 Oct 2026 · Rivet · Web page
Rivet states that every plan runs upgrades in Token Factory Sandboxes. Its Team plan includes managed Token Factory Sandboxes and Tavily research.
Rivet commercial plans18 Oct 2026 · Rivet · Web pageRivet states that every plan runs upgrades in Token Factory Sandboxes. Its Team plan includes managed Token Factory Sandboxes and Tavily research.
Rivet privacy notice
18 Oct 2026 · Rivet · Web page
Rivet identifies Nebius Token Factory as the provider serving its Nemotron upgrade models and Tavily as the provider searching for and extracting upgrade documentation.
Rivet privacy notice18 Oct 2026 · Rivet · Web pageRivet identifies Nebius Token Factory as the provider serving its Nemotron upgrade models and Tavily as the provider searching for and extracting upgrade documentation.
Rivet, operated by Bytkit, is a dependency maintenance tool for developers and software teams using GitHub. It scans repositories for vulnerable packages, upgrades direct and transitive dependencies, and edits application code affected by breaking changes. It supports Python and npm ecosystems, researches migration guidance, and runs the repository’s existing tests in a sandbox before opening one draft pull request. Its GitHub bot supports requested fixes and automatic monitoring, while a fleet dashboard helps teams manage multiple repositories. Rivet leaves review and merging to users.
