Life & fun · alternatives · 2026
24 alternatives to Deterministically install Linux packages with apt-lock
Deterministically install Linux packages (think package-lock.json). - TrevorSundberg/apt-lock
apt-lock is a tool for managing Linux package installations with consistent, reproducible results. It allows users to lock package versions so that installations produce identical outcomes across different systems and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Deterministically install Linux packages with apt-lock launched in 2019; newer entries below may have overtaken it.
- 1

We have been building a package manager for R inspired by Cargo in Rust. The main idea behind rv is to be explicit about the R version in use as well as declaring which dependencies are used in a rproject.toml file for a given project. There's no renv::snapshot equivalent, everything needs to be declared up front, the config file (and resulting lockfile) is the source of truth. This avoids issue where renv might miss information about the installation and is also easy to tweak some packages, eg install one from source and install suggests from another. If you have used…
2025 · github.com · its alternatives →
- 2

Lockdown your linux install. The simple zero config linux hardening script - dolegi/lockdown.sh
2020 · github.com · its alternatives →
- 3
JustDeploy▲214Deploy your app with no lock-in & extra cost
2024 · justdeploy.app · its alternatives →
- 4LS
Hi guys, creator of lockable here - the easiest way to think of lockable is as `flock` for when you don’t have a shared file system. You can use it to control concurrent access to resources or to ensure only a single instance of a process runs at any given time. Your processes can acquire, refresh and release locks via simple HTTP requests, so it’s language/framework agnostic. E.g. with `curl`: $ curl https://lockable.dev/api/acquire/my-lock-name { "response": true //or false, if the lock wasn’t available } $ curl…
2022 · lockable.dev · its alternatives →
- 5

- 6
Refuse▲84Block vulnerable package installs for you and your AI
Jun 2026 · refuse.dev · its alternatives →
- 7II
2015 · isitvulnerable.com · its alternatives →
- 8

This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 9

- 10

Linux system exploration and troubleshooting tool with first class support for containers - draios/sysdig
2014 · github.com · its alternatives →
- 11

:computer: :lock: :key: Secure Boot key manager. Contribute to Foxboron/sbctl development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 12CS
The pattern of downloading and executing installation scripts without verifying them has bothered me for a while. I started messing around with a way to verify the checksum of scripts before I execute them. I've found it a really useful tool for installing things like Rust or Deno. It's written entirely as a shell script, and it's easy to read and understand what's happening. I hope it may be useful to someone else!
2022 · checksum.sh · its alternatives →
- 13

Hey HN, we're Eliza and Xin, and we’ve been working on Attune. Attune is a tool for publishing Linux packages. Previously, we worked at other startups building open source developer tools that ran on our customers’ CI and development machines. For many of them, being able to `apt-get install` our tools was a requirement. When we went to actually set up APT repositories, we were really surprised by the state of tooling around package publishing. The open source tools we found were old, slow, and difficult to figure out how to run in CI. The commercial tools we found were not much better. The…
2025 · github.com · its alternatives →
- 14

I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 15

Nixite generates a bash script to automatically install all your Linux software unattendedly. Nixite prevents prompts and picks the best installation method. Nixite supports Ubuntu-based systems and Arch-based systems. Nixite installs a nixite-updater script to update all package managers and software at once.
2025 · github.com · its alternatives →
- 16

Hi HN! I've posted this a few weeks back without much HN traction - today we've added a free community tier, so anyone can try it out. TL;DR: We’ve launched StableBuild, a new tool to easily freeze and pin Docker images, operating system packages, Python packages, and arbitrary build dependencies; in 5 lines of code: https://stablebuild.com . As the CTO at an ML startup w/ 75 people (https://edgeimpulse.com/) I’ve grown incredibly frustrated with non-deterministic builds. Last year basically every week one of our containers (we have 40+ unique ones in prod)…
2024 · stablebuild.com · its alternatives →
- 17ZZ
2020 · ramsdenj.com · its alternatives →
- 18

Over the last year or so I have worked on a research linux distribution in my spare time. It’s not a distribution for researchers (like Scientific Linux), but my personal playground project to research linux distribution development, i.e. try out fresh ideas.
2019 · michael.stapelberg.ch · its alternatives →
- 19

Hi HN, Package repositories don't need to be complicated. They're just static files: metadata indexes and the packages themselves. Yet somehow hosting your own feels like you need dedicated infrastructure and deep knowledge of obscure tooling. repogen is an SSG for package repos. Point it at your .deb/.rpm/.apk files, it generates the static structure, you upload to S3 or any web host. Done. $0.02/month to host packages for your whole team. It supports Debian, RPM, Alpine, Pacman, and Homebrew. Has incremental mode for updating repos without redownloading everything. Handles…
Jan 2026 · github.com · its alternatives →
- 20

Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.
2019 · packagr.app · its alternatives →
- 21

Description format for APT repositories and its Python implementation using Aptly - ALLOcloud/OpenAPT
2020 · github.com · its alternatives →
- 22

🚀 Fast and simple Node.js version manager, built in Rust - Schniz/fnm
2019 · github.com · its alternatives →
- 23

A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 24

👢 Cross platform dependency manager for developers - mulle-nat-stash/mulle-bootstrap
2016 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →