Dev tools · alternatives · 2026
24 alternatives to DepsAudit
Package monitoring you didn't know you needed
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. DepsAudit launched in 2024; newer entries below may have overtaken it.
- 1
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 2
- 3
- 4
Apparency 3.0▲169Quick look if an OS X Installer package is safe
2025 · mothersruin.com · its alternatives →
- 5
Secure Audit Log▲272Log important application events with a single line of code
2023 · pangea.cloud · its alternatives →
- 6
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 7
Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com · its alternatives →
- 8
Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.
2019 · packagr.app · its alternatives →
- 9
aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.
2015 · appcanary.com · its alternatives →
- 10PS
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
2024 · its alternatives →
- 11
- 12
Track dependency updates before they break your app
Jan 2026 · deplog.dev · its alternatives →
- 13
- 14
EOL Dataset▲64Find every EOL dependency in your stack. Free. In 5 minutes.
Apr 2026 · herodevs.com · its alternatives →
- 15
- 16
Vulert▲10Open source monitoring: zero trust, no code access required
2024 · vulert.com · its alternatives →
- 17
Bytesafe▲66A better way to control your software supply chain
2021 · bytesafe.dev · its alternatives →
- 18
- 19DM
Hi HN! I am Krishna Thota, founder of DevRaven. DevRaven is a monitoring platform for Developers. DevRaven enables engineering teams or individual developers to setup active monitoring for their services/applications and get alerted when things don't work as expected Today's launch makes available the following features: API Monitoring - Monitor your HTTP end points and perform no-code or scripted assertions. Synthetic Monitoring - Execute browser based end-to-end tests using Playwright framework. No setup required. SSL Monitoring - Monitor SSL certificates for your end points and get…
2022 · devraven.io · its alternatives →
- 20ZI
2016 · zpder.herokuapp.com · its alternatives →
- 21RA
2017 · beta.secureit.io · its alternatives →
- 22
Hi HN, I made OSS Sustain Guard. After every high-profile OSS incident, I wonder about the packages I rely on right now. I can skim issues/PRs and activity on GitHub, but that doesn’t scale when you have tens or hundreds of dependencies. I built this to surface sustainability signals (maintainer redundancy, activity trends, funding links, etc.) and create awareness. It’s meant to start a respectful conversation, not to judge projects. These are signals, not truth; everything is inferred from public data (internal mirrors/private work won’t show up). Quick start: pip install…
Jan 2026 · onukura.github.io · its alternatives →
- 23NF
2014 · vuln.pub · its alternatives →
- 24
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →