Dev tools · alternatives · 2026
24 alternatives to LegacyFixer
Python dependency security scans with optional fix PRs
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 2IM
2021 · codereview.doctor · its alternatives →
- 3

Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com · its alternatives →
- 4SS
2017 · semver-sentry.com · its alternatives →
- 5FF
2021 · spatcher.io · its alternatives →
- 6

- 7IM
2024 · marketplace.visualstudio.com · its alternatives →
- 8BD
2015 · scan.patrolserver.com · its alternatives →
- 9AC
2021 · dso.atomist.com · its alternatives →
- 10
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 11SD
As software engineers we are often confronted with the decision of whether to code something ourselves or to add an existing library that does it for us. Whether we like it or not – we are adding dependencies sooner or later. And it's arguably good practice to check a new dependency beforehand: Is it maintained? By whom? How many issues does it have and how many of those are bugs? Are they being fixed? What's on the roadmap? What's the release frequency and how often do APIs break? One of our favorite solutions that already exist to answer such questions is the OpenSSF Scorecard project…
2025 · shouldiuse.dev · its alternatives →
- 12PP
2018 · poetry.eustace.io · its alternatives →
- 13
- 14

Jan 2026 · github.com · its alternatives →
- 15

Verify PyPI package attestations and improve Python supply-chain security - Halfblood-Prince/trustcheck
Apr 2026 · github.com · its alternatives →
- 16AS
2018 · security-guardian.com · its alternatives →
- 17BP
2018 · bugbucket.io · its alternatives →
- 18PP
12d ago · pypi.org · its alternatives →
- 19RR
2017 · openfip.github.io · its alternatives →
- 20
0pirate▲7The zero-knowledge engineer that fixes code without seeing
Nov 2025 · 0pirate.com · its alternatives →
- 21

The Complete Course
2017 · realpython.com · its alternatives →
- 22

- 23

2020 · github.com · its alternatives →
- 24
PyDeps▲9The Most Complete Python Package Dependency Explorer
Jul 2026 · pydeps.com · its alternatives →
Also compare
- A curated list of insecure Python packages alternatives
- I made a bot that suggests fixes for Python bugs right inside the PR alternatives
- I built a tool for policy driven vetting of open source packages alternatives
- SemVer Sentry: Protect open src projects from backward-incompat changes alternatives
- Fixbounty – Find security issues in open source projects alternatives
- NPMScan alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →