Dev tools · alternatives · 2026
24 alternatives to CVE Lite CLI
Find JS/TS vulnerabilities and get exact fix commands
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 2
- 3AC
I'm working on a CLI that helps you create the boilerplate of your project in multiple languages and frameworks. In case of front-end frameworks/libraries, with cli you'll be able to create the project, set up git on your local, add the UI-framework, testing framework, and linting, and in the future releases you'll be able to even add pre-designed components. The CLI currently supports React, Angular, Vue, Svelte and Node.js will be released today. Also soon, you'll be able to deploy your applications to AWS with a single command. Appreciate your feedbacks and all the contributions are…
2022 · its alternatives →
- 4
You write a standard solution, just like on LeetCode, and run it through the CLI. It identifies the problem by ID or title, executes your code against local test cases, and shows the result. It currently supports around 1.4k problems and multiple languages, including Python, C++, Rust, Java, Go, TypeScript, Swift, and others. The project is still an MVP. System design, SQL, and concurrency problems are not supported yet, but support for more problem types is planned. Made in Haskell!
Aug 2026 · github.com · its alternatives →
- 5AM
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io · its alternatives →
- 6
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com · its alternatives →
- 7NF
2014 · vuln.pub · its alternatives →
- 8
Levox▲8Catch sensitive data leaks in code before they ship.
2025 · levox.aifenrix.com · its alternatives →
- 9
Free defensive Log4Shell tools. Scan logs for CVE-2021-44228 JNDI exploitation attempts (including obfuscated payloads) and check whether a Log4j version is vulnerable.
2021 · log4shell.tools · its alternatives →
- 10
DeepScan▲10Detect bugs and quality issues in JavaScript and TypeScript.
2017 · deepscan.io · its alternatives →
- 11
Rule-based code fixes. No AI hallucinations. Just results.
Dec 2025 · its alternatives →
- 12
Supply chain protection that blocks malware at install
Jun 2026 · westbayberry.com · its alternatives →
- 13
- 14
ScanReq▲4Find outdated deps and CVEs across 8 ecosystems in VS Code
Jun 2026 · scanreq.com · its alternatives →
- 15
Subscan is a Go-based CLI tool that helps bug bounty hunters and pentesters with subdomain discovery (passive and brute-force), scoring (HTTP/TLS/CNAME), and misconfig probes (takeovers, open .envs, S3 buckets, etc). Output formats include JSON/CSV/HTML/Markdown. GitHub: https://github.com/omerimzali/subscan Looking for feedback!
2025 · github.com · its alternatives →
- 16
Since last time i posted about dotenv-diff a few things has improved - “did you mean” type suggestions - comment warnings flag (every key in your .env.example must have a #comment above or next to the key) -now whenever you run dotenv-diff it will warn you about difference in you example file if its run against your .env file -catch secret keys that you definitely dont want in your example file -smaller bug fixes
Jul 2026 · github.com · its alternatives →
- 17
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 18
Scan dependency for suspicious, and vulnerable packages.
Apr 2026 · hookcheckv2.vercel.app · its alternatives →
- 19
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 20
A command-line tool for interacting with Github API with some specialized features oriented around Checks - raine/ghtool
2023 · github.com · its alternatives →
- 21
- 22
Slupe lets you use web-based LLMs to modify local files without leaving the browser. npx slupe --clipboard It's a CLI tool that watches for LLM commands and executes them on your computer. Key features: - Custom syntax (NESL) designed for LLM reliability - fewer search/replace failures than existing approaches - Clipboard mode: copy from browser → Slupe executes → paste results back to clipboard - Generates instructions for LLMs based on your allowed actions - Sandboxed filesystem operations with configurable permissions + automatic git backups Motivation: I wanted to use web based Opus…
2025 · github.com · its alternatives →
- 23
Open-source, end-to-end encrypted management of environment secrets.
2023 · envsecrets.com · its alternatives →
- 24
One command to a publish-ready TypeScript CLI
2025 · github.com · its alternatives →
Also compare
- VulnCost for Visual Studio Code alternatives
- Keep alternatives
- A CLI to kick-start any language alternatives
- Openleetcode – Local LeetCode runner where tests live in the repo alternatives
- A minimal TS library that generates prompt injection attacks alternatives
- Regolith – Regex library that prevents ReDoS CVEs in TypeScript alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →