Dev tools · alternatives · 2026
24 alternatives to Artifactory PyPi Scanner – scan and prevent package name clashes
Saves you from Python supply chain attack! Contribute to pan-net-security/artifactory-pypi-scanner development by creating an account on GitHub.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Artifactory PyPi Scanner – scan and prevent package name clashes launched in 2020; newer entries below may have overtaken it.
- 1
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for…
2022 · github.com · its alternatives →
- 2
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 3
I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…
Feb 2026 · github.com · its alternatives →
- 4
2014 · github.com · its alternatives →
- 5
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 6
PwnScan▲8For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…
2025 · pwnscan.com · its alternatives →
- 7
Or how I've fixed my parents' scanner with FOSS. Contribute to babolivier/scanner development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 8
- 9
- 10
Phynd▲9Affordable, automated vulnerability scanning—no blind spots
2025 · phynd.io · its alternatives →
- 11
Proves vulnerabilities before reporting them.
Aug 2026 · dashboard-seven-self-13.vercel.app · its alternatives →
- 12
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 13
Hello HN! I built a pre-commit code scanner that checks your staged changes for security vulnerabilities every time you run 'git commit'. I am an inexperienced programmer and this is my first personal project. Any feedback, positive or negative, big or small, relevant or not, would be greatly helpful and appreciated! The tool requires Gitleaks and Python to run, you will also need to use your own AI API key, which I understand is a big setup friction. You can check out my demo video instead if that is more convenient: https://youtu.be/ZYe5vWFRTus?si=9Fv8DhTHktwDK4mV Thank you…
Jun 2026 · github.com · its alternatives →
- 14
Hi HN! We are excited to show you modguard - a Python tool we built to enforce a modular, decoupled package architecture. We built modguard to solve a recurring problem that we've experienced on software teams - code sprawl. Over time, cross-module imports would tightly couple together what used to be independent domains, and eventually create "balls of mud". This made it harder to test, and harder to make changes. Mis-use of modules which were intended to be private would then degrade performance and even cause security incidents. This would happen for a variety of reasons: - Junior…
2024 · github.com · its alternatives →
- 15
Subscan is a Go-based CLI tool that helps bug bounty hunters and pentesters with subdomain discovery (passive and brute-force), scoring (HTTP/TLS/CNAME), and misconfig probes (takeovers, open .envs, S3 buckets, etc). Output formats include JSON/CSV/HTML/Markdown. GitHub: https://github.com/omerimzali/subscan Looking for feedback!
2025 · github.com · its alternatives →
- 16
Verify PyPI package attestations and improve Python supply-chain security - Halfblood-Prince/trustcheck
Apr 2026 · github.com · its alternatives →
- 17MA
2020 · ao.gl · its alternatives →
- 18
- 19
R7 Vuln-Scanner — Discover the Weakness Before They Do.
Mar 2026 · gum.new · its alternatives →
- 20
- 21
- 22
Professional-grade cryptographic tools for All.
2025 · pycrypt.pyzit.com · its alternatives →
- 23
Examples for SlashID Gate. Contribute to slashid/gate-examples development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 24
Supply chain protection that blocks malware at install
Jun 2026 · westbayberry.com · its alternatives →
Also compare
- Panoptisch – A recursive dependency scanner for Python projects alternatives
- A curated list of insecure Python packages alternatives
- Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust alternatives
- A simple, highly commented, rootkit which attacks GCC and Python alternatives
- Browser-based XSS scanner alternatives
- PwnScan alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →