Dev tools · alternatives · 2026
24 alternatives to FixMyNPM, CLI to fix your insecure npm config
With recent issues with npm configuration issues it's essential that we have a tool like this to fix basic issues
FixMyNPM is a command-line tool designed to address common npm configuration issues. It automatically identifies and fixes basic security and configuration problems in npm setups. The tool is intended for developers… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
Snyk for GitHub▲143Fix vulnerabilities in Node & npm dependencies with a click.
2016 · snyk.io · its alternatives →
- 2
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 3
EasyNPM▲108Search & install command with one-click for npm packages
2023 · easynpm.netlify.app · its alternatives →
- 4
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 5
Bumplyfree tier, from $27.24/mo▲113Update your dependencies and undo anything
Aug 2026 · bumply.app · its alternatives →
- 6
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 7
🚀 Fast and simple Node.js version manager, built in Rust - Schniz/fnm
2019 · github.com · its alternatives →
- 8
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 9
The best stupid idea for fixing problems in node modules. - maxchehab/quickfix
2017 · github.com · its alternatives →
- 10AI
2016 · npmjs.com · its alternatives →
- 11
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 12
- 13
I've invented a new alternative to forking / vendoring / monkey-patching packages in Python. It's a bit like OverlayFS for Python modules - it allows you write modifications for a target module (lower) in a new module (upper), and have these combined in a new virtual module (mount). It works by rewriting imports using AST transformations, then running both the lower and upper module's code in the new Python module. This prevents polluting the global namespace when monkey-patching, and means if you want to make changes to a third-party package, you don't have to take on the…
2025 · github.com · its alternatives →
- 14
Hi HN! We’re Asankhaya and Rohan and we are building Patchwork. Patchwork tackles development gruntwork—like reviews, docs, linting, and security fixes—through customizable, code-first 'patchflows' using LLMs and modular code management steps, all in Python. Here's a quick overview video: https://youtu.be/MLyn6B3bFMU From our time building DevSecOps tools, we experienced first-hand the frustrations our users faced as they built complex delivery pipelines. Almost a third of developer time is spent on code management tasks[1], yet backlogs remain. Patchwork lets you combine…
2024 · github.com · its alternatives →
- 15
Reshift Security▲123Find vulnerabilities in your JavaScript code for free
2021 · socolivezb.tv · its alternatives →
- 16
At Plaid, we spend a lot of time thinking about the tools we use on the engineering side, which has helped us to automate time-consuming tasks and focus on e...
2016 · blog.plaid.com · its alternatives →
- 17
2016 · 720kb.github.io · its alternatives →
- 18
Hey HN, we are building bumpgen (https://github.com/xeol-io/bumpgen/) to remove the toil of fixing breaking changes during version bumps. bumpgen bumps your npm package version then generates the fixes to potential breaking changes. There were some interesting challenges we encountered using an LLM to fix breaking changes: [1] Finding the breaking changes → know how is a dependency used through the codebase [2] Knowing how to fix the a breaking change → know how the dependency has changed from one version to another [3] Understanding how the fix has modified existing…
2024 · github.com · its alternatives →
- 19IM
2024 · prakhar897.github.io · its alternatives →
- 20
bunpm▲4npm, yarn, pnpm - same commands, powered by Bun underneath
Jul 2026 · github.com · its alternatives →
- 21FA
Hi, we’re Lukas, Lars and Matthias, and we're building “Fix” (https://fix.security). Fix is an open source cloud asset inventory for developers to track their infrastructure’s security posture aka “cloud security posture management” (CSPM). How Fix works: Fix takes a snapshot of your inventory on an hourly basis by calling the cloud APIs, runs policy and compliance checks such as the CIS benchmark against that inventory, and provides the findings in a dashboard, via .csv export or API so that developers can use the raw data and build workflows. We’re also working on data sync to S3…
2024 · fix.security · its alternatives →
- 22
- 23
Current AI-assisted CLI tools are often part of larger systems and work better on Linux. I built llm-term to address these. It's a Rust-based tool that compiles into a single binary file. You only need to download the binary, add it to your PATH, and configure your OpenAI key to get started. While llm-term offers an option for gpt-4o, it works great with gpt-4o-mini. So it's not costly. I appreciate any feedback or suggestions.
2024 · github.com · its alternatives →
- 24
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →