Dev tools · alternatives · 2026
24 alternatives to Beta Testing needed for my package Trustcheck
Verify PyPI package attestations and improve Python supply-chain security - Halfblood-Prince/trustcheck
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
LegacyFixer▲61Python dependency security scans with optional fix PRs
13d ago · legacyfixer.ai · its alternatives →
- 2
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 3
2014 · github.com · its alternatives →
- 4
- 5
Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.
2019 · packagr.app · its alternatives →
- 6
Mirroring PyPI packages for environments/networks that do not have access to the Internet is hard. It's actually hard even in environments that do have access to the Internet. Most solutions out there either: 1. Depend on pip to download and cache package distributions. This means those downloads will probably only work in a similar environment (same Python interpreter, same libc), because of the nature of binary package distributions and the fact that packages have optional dependencies for different environments. 2. Depend on other PyPI packages, meaning installing the mirror in a…
2022 · github.com · its alternatives →
- 7PI
License and distribute your packages with our private npm registry.
2013 · pkghub.io · its alternatives →
- 8
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 9IP
2017 · instantpackagename.com · its alternatives →
- 10
Check your wheels have the right contents. Contribute to jwodder/check-wheel-contents development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 11
Hi HN! This is my first open source package. PyCharm used to have a nifty tool to show you requirements.txt packages that needed updates. You could click a button and open the github page, click a button to upgrade, all in the file. It was super convenient. Then it went away. The package was written in a few languages that I have no experience with, but I figured I'd build something that worked for my use case, and maybe it can help you, too. After installing, you point it at your requirements.txt file, and it will spit out something like this: ---- File caching enabled The following…
2025 · github.com · its alternatives →
- 12TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev · its alternatives →
- 13IM
2021 · codereview.doctor · its alternatives →
- 14
PyDeps▲9The Most Complete Python Package Dependency Explorer
Jul 2026 · pydeps.com · its alternatives →
- 15PD
2021 · pickbetterpack.com · its alternatives →
- 16
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 17
Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.
2020 · packagr.app · its alternatives →
- 18
Saves you from Python supply chain attack! Contribute to pan-net-security/artifactory-pypi-scanner development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 19
If you are worried about the recent Lazarus group software supply chain attack, you should consider having guard rails that is more than conventional SCA. `vet` detects the package (version) published in the report as malware. Try out vet, its free and open source: https://github.com/safedep/vet More details on the attack: https://www.nodejs-security.com/blog/north-korea-malware-on-...
2023 · github.com · its alternatives →
- 20
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com · its alternatives →
- 21MA
2020 · ao.gl · its alternatives →
- 22
- 23
- 24
Howdy friends. I've been a zero to one product manager for 12 plus years and along the way I kept borrowing pieces from different discovery frameworks until I had a methodology of my own, one that actually raises the odds of an idea succeeding. This does not replace user interviews obviously, but it leads you in the right direction. Looking forward for your feedback
Jul 2026 · github.com · its alternatives →
Also compare
- LegacyFixer alternatives
- A curated list of insecure Python packages alternatives
- A simple, highly commented, rootkit which attacks GCC and Python alternatives
- betaForBeta alternatives
- Packagr.app – a private package repository with security scanning alternatives
- Morgan – PyPI Mirror for Restricted/Offline Environments alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →