Dev tools · alternatives · 2026
24 alternatives to Dependuck
Dependency and Container Security
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Dependuck launched in 2024; newer entries below may have overtaken it.
- 1IB
I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.
2023 · containercve.com · its alternatives →
- 2
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 3
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 4NF
2014 · vuln.pub · its alternatives →
- 5
- 6
- 7
WhatsDiff▲141CLI tool to help you understand changes in your dependencies
Nov 2025 · whatsdiff.app · its alternatives →
- 8
Dependabot▲96Automated dependency updates for Ruby and JavaScript
2017 · github.com · its alternatives →
- 9
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 10
- 11GF
2021 · contains.dev · its alternatives →
- 12
Explore the architecture of apps with an interactive graph
2021 · its alternatives →
- 13
node dependency trees as a service. Contribute to fiatjaf/node-dependencies-view development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 14DC
I've been frustrated with dependency hell and clutter on my VPS from dev, so I built Devbox: a lightweight, open-source CLI tool that spins up isolated development environments using Docker. Each project runs in its own container, but your code stays in simple flat folders on the host machine—no messing with volumes or sync issues. Environments are disposable, so you can nuke and recreate them without losing your work. Key features: - Instant setup: `devbox init my-project` and you're in a fresh env with `devbox shell`. - Configurable via JSON: Define packages, services, and more in a…
2025 · devbox.ar0.eu · its alternatives →
- 15
Provision dev containers and staging environments with IDEs
2021 · github.com · its alternatives →
- 16TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev · its alternatives →
- 17
GitHub's security alerts for vulnerable dependencies
2017 · github.blog · its alternatives →
- 18
- 19
This project addresses the inefficiencies of traditional Dockerfile-based container builds where each customization layer creates storage bloat through duplicate dependencies from repeated apt-get install commands, network inefficiency from redundant package downloads across different images, and slow iteration cycles requiring full rebuilds of all previous steps. Our solution enables building minimal base images from scratch using debootstrap that precisely include only required components in the initial build, while allowing creation of specialized variants (Java, Kafka, etc.) from these…
2025 · github.com · its alternatives →
- 20
Refuse▲84Block vulnerable package installs for you and your AI
Jun 2026 · refuse.dev · its alternatives →
- 21
Show NuGet, NPM and Maven dependencies for you project
2024 · its alternatives →
- 22
- 23
- 24
LegacyFixer▲61Python dependency security scans with optional fix PRs
12d ago · legacyfixer.ai · its alternatives →
Also compare
- I built ContainerCVE – a web tool to scan public Docker images alternatives
- Dependency CI – Continuous testing for your dependencies alternatives
- Socket – Secure your JavaScript supply chain alternatives
- Notifications for security vulnerabilities in your dependencies alternatives
- Socket alternatives
- contains.dev alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →