Dev tools · alternatives · 2026
24 alternatives to Kavyr
js secruity manager
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 2
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 3
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 4
In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…
May 2026 · npmjs.com · its alternatives →
- 5
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 6
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 7
- 8
EasyNPM▲108Search & install command with one-click for npm packages
2023 · easynpm.netlify.app · its alternatives →
- 9
Bumplyfree tier, from $27.24/mo▲113Update your dependencies and undo anything
Aug 2026 · bumply.app · its alternatives →
- 10
bunpm▲4npm, yarn, pnpm - same commands, powered by Bun underneath
Jul 2026 · github.com · its alternatives →
- 11
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 12
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 13
🚀 Fast and simple Node.js version manager, built in Rust - Schniz/fnm
2019 · github.com · its alternatives →
- 14
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 15
Snyk for GitHub▲143Fix vulnerabilities in Node & npm dependencies with a click.
2016 · snyk.io · its alternatives →
- 16
A crate to protect against malicious JSON payloads. - ADD-SP/json-threat-protection.rs
2024 · github.com · its alternatives →
- 17AI
2016 · npmjs.com · its alternatives →
- 18
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 19
A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate
2025 · github.com · its alternatives →
- 20
bootstrap K3s over SSH in < 60s 🚀. Contribute to alexellis/k3sup development by creating an account on GitHub.
2019 · k3sup.dev · its alternatives →
- 21
NPM Plus▲6AI-native package manager for JavaScript, powered by MCP
2025 · npmplus.dev · its alternatives →
- 22
High performance secure & portable Rust functions in Node.js
2020 · secondstate.io · its alternatives →
- 23
Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome extension: https://chrome.google.com/webstore/detail/socket-security/jb... Firefox add-on: https://addons.mozilla.org/en-US/firefox/addon/socket-securi... Socket scans NPM packages for malware, vulnerabilities, code smell, and…
2023 · chrome.google.com · its alternatives →
- 24
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
Also compare
- DepsGuard – One command to harden NPM/pnpm/yarn/bun/uv configs alternatives
- DepsGuard alternatives
- Tips to stay safe from NPM supply chain attacks alternatives
- Safe-install – safer NPM installs with trusted build dependencies alternatives
- Safe-NPM – only install packages that are +90 days old alternatives
- npm install actual-malware alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →