Dev tools · alternatives · 2026
24 alternatives to Iroh – Analyze JavaScript at Runtime
Dynamic code analysis tool - Exploit, record and analyze running JavaScript - maierfelix/Iroh
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Iroh – Analyze JavaScript at Runtime launched in 2017; newer entries below may have overtaken it.
- 1AL
2017 · maierfelix.github.io · its alternatives →
- 2

Find static code analysis tools and linters for Java, JavaScript, PHP, Python, Ruby, C/C++, C#, Go, Swift, and more. All tools and linters are peer-reviewed by fellow developers to select the best tools available. Avoid bugs in production, outages on weekends, and angry customers.
2020 · analysis-tools.dev · its alternatives →
- 3

A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker
2018 · github.com · its alternatives →
- 4

Find the origin of any character in the DOM
2019 · fromjs.com · its alternatives →
- 5
Bun▲303A fast JS runtime Node.js replacement with built‑in tools
Dec 2025 · bun.com · its alternatives →
- 6

This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…
2024 · github.com · its alternatives →
- 7

[I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…
2023 · gravitymoth.com · its alternatives →
- 8

DeepScan is a cutting-edge static analysis tool for JavaScript. You can inspect all of your JavaScript code comprehensively.
2017 · deepscan.io · its alternatives →
- 9
Runabout▲90Instantly reproduce scenarios in your code
2023 · plugins.jetbrains.com · its alternatives →
- 10

A safe eval library based on WebAssembly and Duktape/QuickJS. - maple3142/wasm-jseval
2020 · github.com · its alternatives →
- 11

QuickBEAM is a JavaScript runtime embedded inside the Erlang/OTP VM. If you’re building a full-stack app, JavaScript tends to leak in anyway — frontend, SSR, or third-party code. QuickBEAM runs that JavaScript inside OTP supervision trees. Each runtime is a process with a `Beam` global that can: - call Elixir code - send/receive messages - spawn and monitor processes - inspect runtime/system state It also provides browser-style APIs backed by OTP/native primitives (fetch, WebSocket, Worker, BroadcastChannel, localStorage, native DOM, etc.). This makes it usable for: - SSR…
Mar 2026 · github.com · its alternatives →
- 12

Helps analyze goroutines. Inspired by TDA for Java and goroutine-inspect for golang. - openziti/goroutine-analyzer
2022 · github.com · its alternatives →
- 13SU
Hello HN, I am Parth. In my experience, the current form of testing automation takes too long. To solve this, I am creating a developer tool to speed up the code-test cycle for Java developers. It has two main parts: Direct Invoke - lets you call any Java function directly, without the need to execute the whole call hierarchy. (e.g. an HTTP endpoint) In my normal coding workflow, I use the “Evaluate Expression” feature inside IntelliJ IDE. I usually put a breakpoint somewhere in the code and after hitting the breakpoint by calling an HTTP api, let the execution remain paused while I explore…
2023 · its alternatives →
- 14

Hey HN. We’re Jay and Vadim from Highlight.io (https://highlight.io). We’re building an open source [1] monitoring platform for web applications. Today we’re excited to be sharing a performance tool we’ve been working on, which helps you inspect the latency of code execution from the client to the server. As engineers at past startups, we often had to debug slow queries, poor load times, inconsistent errors, etc... While tools like Jaegar [2] helped us inspect server-side performance, we had no way to tie user events to the traces we were inspecting. In other words, although we had…
2024 · github.com · its alternatives →
- 15

- 16

Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 17WP
Hello, Are you curious to discover which snippets of your code were copied from Stackoverflow? Where else on the Internet are those icons that you copied a long time ago? Or simply to discover which licenses apply to the open source in your code? There's an app for that: http://triplecheck.net/quantum/ Development of this tooling took over two years, we archived over 630Tb of open source data around the web. Some sources of data have gone offline in the meanwhile but we kept a copy for posterity. Things to consider: - Stackoverflow snippet detection is limited to Java at…
2016 · its alternatives →
- 18

All your malware analysis tools in one place
2021 · analyze.intezer.com · its alternatives →
- 19

:aquarius: A Lisp-esque, JS-interpreted scripting language - tsortwehttam/runiq
2015 · github.com · its alternatives →
- 20

Run queries on your Java code to check if it meets the criteria suggested by the book Effective Java. And some others. - ftomassetti/effectivejava
2015 · github.com · its alternatives →
- 21

Wrote a thing about what makes Elysia stand out in a performance benchmark game Basically, there's a JIT "compiler" embedded into a framework This approach has been used by ajv and TypeBox before for input validation, making it faster than other competitors Elysia basically does the same, but scales that into a full backend framework This gave Elysia an unfair advantage in the performance game, making Elysia the fastest framework on Bun runtime, but also faster than most on Node, Deno, and Cloudflare Worker as well, when using the same underlying HTTP adapter There is an escape hatch if…
Feb 2026 · elysiajs.com · its alternatives →
- 22

This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 23

Define and run pattern-based custom linting rules. - quasilyte/go-ruleguard
2020 · github.com · its alternatives →
- 24IE
Nhờ sự ổn định, hình ảnh sắc nét và khả năng cập nhật nhanh chóng, CakhiaTV trở thành địa chỉ quen thuộc của hàng triệu người hâm mộ bóng đá mỗi ngày. Dù bạn
2017 · es2017.io · its alternatives →
Also compare
- A library to record and intercept JavaScript at runtime alternatives
- Compare Analysis Tools For Python, Ruby, C, PHP, Go alternatives
- A Chrome extension that tracks front-end JavaScript at runtime alternatives
- An experimental data-flow analysis tool for JavaScript alternatives
- Bun alternatives
- Execute JavaScript in a WebAssembly QuickJS sandbox alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →