Life & fun · alternatives · 2026
24 alternatives to Is it vulnerable? Drag-n-drop your Gemfile.lock to check
Is it Vulnerable is a tool that checks Ruby project dependencies for known security vulnerabilities. Users can drag and drop their Gemfile.lock file to quickly scan for vulnerable gems in their codebase. The service is… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Is it vulnerable? Drag-n-drop your Gemfile.lock to check launched in 2015; newer entries below may have overtaken it.
- 1
- 2PR
2012 · cirw.in · its alternatives →
- 3
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 4
> "In a world without nil safety, one gem dares to ask: 'What if we just guessed?'"
Oct 2025 · github.com · its alternatives →
- 5
Stop bots, fraud, and abuse with industry-leading accuracy
2024 · stytch.com · its alternatives →
- 6
Underlock makes it dead simple to encrypt and decrypt your data and files. It comes with little to no dependencies and has a very small API surface. - metaware/underlock
2017 · github.com · its alternatives →
- 7
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 8
Edge stream anomaly detection for Ruby. Contribute to ankane/midas-ruby development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 9
Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 10
Pipask is a drop-in replacement for pip that addresses a serious security flaw: standard pip executes arbitrary code from source distributions during dependency resolution, without warning or consent. Pipask retrieves metadata through PyPI's JSON API first, then checks repository popularity, download counts, package age, and known vulnerabilities before allowing installation. It presents you with a pretty report and asks for you consent with installation, giving you control over what code runs on your system. More details in the intro blog post:…
2025 · github.com · its alternatives →
- 11
Refuse▲84Block vulnerable package installs for you and your AI
Jun 2026 · refuse.dev · its alternatives →
- 12
Finderlock▲80Lock Mac files in Finder with Touch ID & AES-256
May 2026 · finderlock.com · its alternatives →
- 13
aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.
2015 · appcanary.com · its alternatives →
- 14
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 15
Alternative to magic.h and infer. Zero dependencies. Fully extensible. Works in no_std, async, and embedded contexts.
2025 · crates.io · its alternatives →
- 16
RoRvsWild▲84Performances and errors monitoring for Ruby on Rails apps.
2017 · rorvswild.com · its alternatives →
- 17
Lockdown your linux install. The simple zero config linux hardening script - dolegi/lockdown.sh
2020 · github.com · its alternatives →
- 18CR
2015 · crashbreak.com · its alternatives →
- 19
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 20
- 21
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 22
I built a Ruby gem for memoization with TTL + LRU cache. It’s thread-safe, and has been helpful in my own apps. Would love to get some feedback: https://github.com/mishalzaman/memo_ttl
2025 · github.com · its alternatives →
- 23
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 24
Also compare
- Is It Vulnerable alternatives
- pry-rescue — workflow-optimized debugging for ruby alternatives
- A curated list of insecure Python packages alternatives
- LLM Rescuer – Fixing the billion dollar mistake in Ruby alternatives
- Stytch Fraud & Risk Prevention alternatives
- Underlock – dead simple encryption in Ruby, minimal dependencies and API alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →