Alternatives
Products that do what CVE Lite CLI does
Find JS/TS vulnerabilities and get exact fix commands
- 1
- 2IB
Hi HN, I built this because I got tired of the Claude Code CLI hiding details from me. Recent updates have replaced critical output with summaries like "Read 3 files" or "Edited 2 files". To see what actually happened, I was forced to use `--verbose`, which floods the terminal with unreadable JSON and system prompts. I wanted a middle ground: *Full observability without the noise.* `claude-devtools` is a local Electron app that tails the session logs in `~/.claude/` to reconstruct the execution trace in real-time. *Unlike wrappers, it solves the visibility gap in your native…
Feb 2026 · github.com
- 3CF
2016 · github.com
- 4
- 5SS
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev
- 6CA
We've been building Crust (https://crustjs.com/), a TypeScript-first, Bun-native CLI framework with zero dependencies. It's been powering our core product internally for a while, and we're now open-sourcing it. The problem we kept running into: existing CLI frameworks in the JS ecosystem are either minimal arg parsers where you wire everything yourself, or heavyweight frameworks with large dependency trees and Node-era assumptions. We wanted something in between. What Crust does differently: - Full type inference from definitions — args and flags are inferred automatically. No…
Mar 2026 · github.com
- 7AC
I'm working on a CLI that helps you create the boilerplate of your project in multiple languages and frameworks. In case of front-end frameworks/libraries, with cli you'll be able to create the project, set up git on your local, add the UI-framework, testing framework, and linting, and in the future releases you'll be able to even add pre-designed components. The CLI currently supports React, Angular, Vue, Svelte and Node.js will be released today. Also soon, you'll be able to deploy your applications to AWS with a single command. Appreciate your feedbacks and all the contributions are…
2022
- 8
- 9
You write a standard solution, just like on LeetCode, and run it through the CLI. It identifies the problem by ID or title, executes your code against local test cases, and shows the result. It currently supports around 1.4k problems and multiple languages, including Python, C++, Rust, Java, Go, TypeScript, Swift, and others. The project is still an MVP. System design, SQL, and concurrency problems are not supported yet, but support for more problem types is planned. Made in Haskell!
19d ago · github.com
- 10
- 11AM
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io
- 12RR
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com
- 13JL
2020 · github.com
- 14
- 15EL
May 2026 · github.com
- 16RB
2022 · github.com
- 17DC
Feb 2026 · github.com
- 18NF
2014 · vuln.pub
- 19
- 20
Supply chain protection that blocks malware at install
Jun 2026 · westbayberry.com
- 21
- 22
Since last time i posted about dotenv-diff a few things has improved - “did you mean” type suggestions - comment warnings flag (every key in your .env.example must have a #comment above or next to the key) -now whenever you run dotenv-diff it will warn you about difference in you example file if its run against your .env file -catch secret keys that you definitely dont want in your example file -smaller bug fixes
Jul 2026 · github.com
- 23IB
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com
- 24
Scan dependency for suspicious, and vulnerable packages.
Apr 2026 · hookcheckv2.vercel.app
Ranked by how close each launch is in meaning, then by votes. Refine with a description →