nowfound

Dev tools · alternatives · 2026

24 alternatives to LegacyFixer

Python dependency security scans with optional fix PRs

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.

    2016 · github.com · its alternatives →

  2. 2IM
  3. 3

    Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)

    2023 · github.com · its alternatives →

  4. 4SS
  5. 5FF
  6. 6

    Automated github dependency security scanner

    Nov 2025 · npmscan.io · its alternatives →

  7. 7IM
  8. 8BD
  9. 9AC
  10. 10

    Configure once, prevent the next compromised package install

    May 2026 · depsguard.com · its alternatives →

  11. 11SD

    As software engineers we are often confronted with the decision of whether to code something ourselves or to add an existing library that does it for us. Whether we like it or not – we are adding dependencies sooner or later. And it's arguably good practice to check a new dependency beforehand: Is it maintained? By whom? How many issues does it have and how many of those are bugs? Are they being fixed? What's on the roadmap? What's the release frequency and how often do APIs break? One of our favorite solutions that already exist to answer such questions is the OpenSSF Scorecard project…

    2025 · shouldiuse.dev · its alternatives →

  12. 12PP
  13. 13
    Pacgie▲6

    Secure, updated & optimized dependencies

    2025 · pacgie.com · its alternatives →

  14. 14
  15. 15

    Verify PyPI package attestations and improve Python supply-chain security - Halfblood-Prince/trustcheck

    Apr 2026 · github.com · its alternatives →

  16. 16AS
  17. 17BP
  18. 18PP
  19. 19RR
  20. 20

    The zero-knowledge engineer that fixes code without seeing

    Nov 2025 · 0pirate.com · its alternatives →

  21. 21
  22. 22

    Monitors dependencies for security vulnerabilities.

    2017 · its alternatives →

  23. 23
  24. 24
    PyDeps▲9

    The Most Complete Python Package Dependency Explorer

    Jul 2026 · pydeps.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →