Dev tools · alternatives · 2026

24 alternatives to Anti Slopsquat

Protect your projects from hallucinated LLM imports

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1
Stun LLMs with thousands of invisible Unicode characters▲206
I made a free tool that stuns LLMs with invisible Unicode characters. *Use cases:* Anti-plagiarism, text obfuscation against LLM scrapers, or just for fun! Even just one word's worth of “gibberified” text is enough to block most LLMs from responding coherently.
Nov 2025 · gibberifier.com · its alternatives →
2
Langfuse▲771
Open source tracing and analytics for LLM applications
2023 · langfuse.com · its alternatives →
3
ChatGPT Plugins are a security nightmare▲238
New ways of breaking app-integrated LLMs . Contribute to greshake/llm-security development by creating an account on GitHub.
2023 · github.com · its alternatives →
4
Breadcrumb▲163
Open-source LLM tracing for agent visibility
Mar 2026 · breadcrumb.sh · its alternatives →
5
Robust LLM extractor for websites in TypeScript▲72
We've been building data pipelines that scrape websites and extract structured data for a while now. If you've done this, you know the drill: you write CSS selectors, the site changes its layout, everything breaks at 2am, and you spend your morning rewriting parsers. LLMs seemed like the obvious fix — just throw the HTML at GPT and ask for JSON. Except in practice, it's more painful than that: - Raw HTML is full of nav bars, footers, and tracking junk that eats your token budget. A typical product page is 80% noise. - LLMs return malformed JSON more often than you'd expect, especially with…
Mar 2026 · github.com · its alternatives →
6
A context-aware permission guard for Claude Code▲127
We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…
Mar 2026 · github.com · its alternatives →
7
You don't need to adopt new tools for LLM observability▲102
If you've built any web-based app in the last 15 years, you probably used something like Datadog, New Relic, Sentry, etc. to monitor and trace your app, right? Why should it be different when the app you're building happens to be using LLMs? So today we're open-sourcing OpenLLMetry-JS. It's an open protocol and SDK, based on OpenTelemetry, that provides traces and metrics for LLM JS/TS applications and can be connected to any of the 15+ tools that already support OpenTelemetry. Here's the repo: https://github.com/traceloop/openllmetry-js A few months ago we launched…
2024 · github.com · its alternatives →
8
Sloppoke▲3
Blazing fast LLM slop removal from code before you commit
Jun 2026 · sloppoke.me · its alternatives →
9
Panoptisch – A recursive dependency scanner for Python projects▲45
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for…
2022 · github.com · its alternatives →
10
LLM-Term – Simple Rust-based CLI assist tool▲32
Current AI-assisted CLI tools are often part of larger systems and work better on Linux. I built llm-term to address these. It's a Rust-based tool that compiles into a single binary file. You only need to download the binary, add it to your PATH, and configure your OpenAI key to get started. While llm-term offers an option for gpt-4o, it works great with gpt-4o-mini. So it's not costly. I appreciate any feedback or suggestions.
2024 · github.com · its alternatives →
11
LLM, a Rust Crate/CLI for CPU Inference of LLMs (LLaMA, GPT-NeoX, etc.)▲45
G'day, HN! I'm one of the maintainers of `llm`. I've been working alongside a trusty group of contributors to bring this project to life, and we're now at a point where we're ready to share it with the world. Large language models (LLMs) are taking the computing world by storm due to their emergent abilities that allow them to perform a wide variety of tasks, including translation, summarization, code generation, and even some degree of reasoning. However, the ecosystem around LLMs is still in its infancy, and it can be difficult to get started with these models. `llm` is a one-stop shop for…
2023 · github.com · its alternatives →
12
noirdoc▲96
PII guard for Claude Code to keep client data out of context
Apr 2026 · noirdoc.de · its alternatives →
13
Safe-NPM – only install packages that are +90 days old▲90
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
14
Sloppylint – A linter for AI-generated Python code▲19
AI coding assistants are productive but sloppy. They produce code that looks right but: - Imports packages that don't exist - Uses placeholder functions that do nothing - Leaks patterns from JavaScript, Java, Ruby into Python - Leaves behind dead code and duplicates - Uses mutable default arguments I built sloppylint to catch these "AI slop" patterns before they hit production. pip install sloppylint sloppylint . It detects 100+ patterns across categories: - Hallucinated imports (20% of AI imports reference non-existent packages) - Placeholder code (`pass`, `...`, `TODO`) - Wrong-language…
Dec 2025 · github.com · its alternatives →
15
CLI tool for detecting non-exact code duplication with embedding models▲91
Embedding-based code duplication detector. Contribute to rafal-qa/slopo development by creating an account on GitHub.
Jul 2026 · github.com · its alternatives →
16
AISlop, a CLI for catching AI generated code smells▲73
Hi, I’m Kenny, I’ve been building aislop. I starting working on this after using Claude Code, codex and opencode several times and noticing some slops. They aren’t syntax and passes most tests, they are patterns like empty catch blocks, useless comments, duplicated helpers, dead code and many more. So I built a tool to scan and check for these patterns and wired it into hooks so after each tool call, the agent checks for the slops. You can try it out with npx aislop scan. It’s all local and no code is transferred. Thank you.
May 2026 · github.com · its alternatives →
17
Veln — every package, verified▲17
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
18
LLMs can be susceptible to a new kind of malware▲17
New ways of breaking app-integrated LLMs . Contribute to greshake/llm-security development by creating an account on GitHub.
2023 · github.com · its alternatives →
19
Slupe lets web LLMs safely edit local files▲7
Slupe lets you use web-based LLMs to modify local files without leaving the browser. npx slupe --clipboard It's a CLI tool that watches for LLM commands and executes them on your computer. Key features: - Custom syntax (NESL) designed for LLM reliability - fewer search/replace failures than existing approaches - Clipboard mode: copy from browser → Slupe executes → paste results back to clipboard - Generates instructions for LLMs based on your allowed actions - Sandboxed filesystem operations with configurable permissions + automatic git backups Motivation: I wanted to use web based Opus…
2025 · github.com · its alternatives →
20
I built a PR listener and ruleset to detect malicious code in CI/CD▲13
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
21
Regolith – Regex library that prevents ReDoS CVEs in TypeScript▲27
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com · its alternatives →
22
Automated red teaming for your LLM app▲23
Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…
2024 · promptfoo.dev · its alternatives →
23
Rust built open-sourced CLI tool for API specification validation▲23
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
24
Robust LLM Extractor for HTML/Markdown in TypeScript▲14
While working with LLMs for structured web data extraction, we saw issues with invalid JSON and broken links in the output. This led me to build a library focused on robust extraction and enrichment: - Clean HTML conversion: transforms HTML into LLM-friendly markdown with an option to extract just the main content - LLM structured output: Uses Gemini 2.5 flash or GPT-4o mini to balance accuracy and cost. Can also also use custom prompt - JSON sanitization: If the LLM structured output fails or doesn't fully match your schema, a sanitization process attempts to recover and fix the data,…
2025 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →