Dev tools · alternatives · 2026
24 alternatives to Deptic
Scan any GitHub repo.Generate SBOMs & detect CVEs instantly.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
deptry 0.14.0 was just released, bringing significant speed improvements: It is now up to 10 times faster than the previous release! For those unfamiliar with deptry; deptry is a command line tool to check for issues with dependencies in a Python project, such as unused or missing dependencies. GitHub: https://github.com/fpgmaas/deptry For some benchmarks of the new release, see the release notes: https://github.com/fpgmaas/deptry/releases/tag/0.14.0 The performance improvement was achieved by leveraging Rust to parse the AST and extract…
2024 · github.com · its alternatives →
- 2
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 3
- 4
deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service. I built this because AI coding agents kept suggesting outdated or vulnerable package versions. I kept having to manually tell tools like Claude and Codex to use newer, safer versions. deptrust gives the agent a quick way to verify whether a…
Jul 2026 · github.com · its alternatives →
- 5
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 6
Bytesafe▲66A better way to control your software supply chain
2021 · bytesafe.dev · its alternatives →
- 7
SolidityScan▲195The ultimate EVM compatible smart contract analysis tool
2023 · solidityscan.com · its alternatives →
- 8SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 9
FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
2017 · fossa.io · its alternatives →
- 10
Deptools▲9Scan. Score. Decide. One platform for every dependency
Jun 2026 · deptools.io · its alternatives →
- 11
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 12
NoDocs▲116as a solo builder i was struggling to create docs for all my saas projects. there aren’t many good options out there. open-source ones and mintlify all require code, and that takes too much time. i tried doing it in notion but it never looked like proper docs and didn’t feel professional. gitbook is the only one left and like mintlify, its pro plans are too expensive for a solo maker. so i built NoDocs.io . its nocode docs builder. you can create docs for your saas or project even with a free plan using the built-in nodocs subdomain. it only shows a small nodocs branding for reach more…
2025 · nodocs.io · its alternatives →
- 13
Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…
2023 · github.com · its alternatives →
- 14
SBOMHub▲2Track vulnerabilities across all your software projects
Feb 2026 · sbomhub.app · its alternatives →
- 15
Autsec▲66Automate tool to identify vulnerabilities in smart contracts
2023 · autsec.io · its alternatives →
- 16
Your billing says paid. Your app might disagree.
Jun 2026 · prodverdict.com · its alternatives →
- 17
SOOS▲68Developer security, license, compliance and testing platform
2021 · soos.io · its alternatives →
- 18
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 19
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 20TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev · its alternatives →
- 21
A single pane of glass for software supply chain risk
2023 · vulnerabilities.io · its alternatives →
- 22
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 23
- 24
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →