Dev tools · alternatives · 2026
24 alternatives to Hook Check
Scan dependency for suspicious, and vulnerable packages.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 2
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 3
- 4
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 5II
2015 · isitvulnerable.com · its alternatives →
- 6
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 7
- 8PD
2021 · pickbetterpack.com · its alternatives →
- 9
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 10
Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.
2019 · packagr.app · its alternatives →
- 11
Check your wheels have the right contents. Contribute to jwodder/check-wheel-contents development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 12
Probely 2.0▲93Quickly scan your website and fix vulnerabilities
2019 · probely.com · its alternatives →
- 13
Probely▲87Intuitive and easy-to-use webapp vulnerability scanner
2018 · probely.com · its alternatives →
- 14
GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.
2017 · dependabot.com · its alternatives →
- 15
- 16
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 17
Free security scan that tells you exactly how to fix it
Jun 2026 · its alternatives →
- 18
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 19
- 20
Paste your package.json, get a production-readiness score
Aug 2026 · jsondevtools.org · its alternatives →
- 21
Hi HN! This is my first open source package. PyCharm used to have a nifty tool to show you requirements.txt packages that needed updates. You could click a button and open the github page, click a button to upgrade, all in the file. It was super convenient. Then it went away. The package was written in a few languages that I have no experience with, but I figured I'd build something that worked for my use case, and maybe it can help you, too. After installing, you point it at your requirements.txt file, and it will spit out something like this: ---- File caching enabled The following…
2025 · github.com · its alternatives →
- 22PJ
2015 · package.json.is · its alternatives →
- 23SD
As software engineers we are often confronted with the decision of whether to code something ourselves or to add an existing library that does it for us. Whether we like it or not – we are adding dependencies sooner or later. And it's arguably good practice to check a new dependency beforehand: Is it maintained? By whom? How many issues does it have and how many of those are bugs? Are they being fixed? What's on the roadmap? What's the release frequency and how often do APIs break? One of our favorite solutions that already exist to answer such questions is the OpenSSF Scorecard project…
2025 · shouldiuse.dev · its alternatives →
- 24
A tool to help developers stay safe with npm dependencies.
Feb 2026 · package-sentinel.vercel.app · its alternatives →
Also compare
- 4smart Packages Overview alternatives
- A curated list of insecure Python packages alternatives
- DepsAudit alternatives
- Dependency CI – Continuous testing for your dependencies alternatives
- Is it vulnerable? Drag-n-drop your Gemfile.lock to check alternatives
- Socket – Secure your JavaScript supply chain alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →