Dev tools · alternatives · 2026
24 alternatives to MonoGuard
30-second monorepo analysis with zero config setup
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1EJ
This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…
2024 · github.com · its alternatives →
- 2SS
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 3ME
Hi there, I've been working sporadically over the last six months on a go monorepo tool (0 config it just use go workspace and go convention). It’s basically like TurboRepo but without the task runner. The tool builds a dependency graph between packages, allowing you to do things similar to what you can do in TurboRepo, like "only test the packages and the packages that depend on them, compared to the main branch," or "only install dependencies for Package A and its dependencies," etc. I use native go tool to get dependencies and create dependency graph between the package.Nothing crazy but…
2024 · github.com · its alternatives →
- 4
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 5
- 6SW
[I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…
2023 · gravitymoth.com · its alternatives →
- 7AM
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io · its alternatives →
- 8ZC
2025 · github.com · its alternatives →
- 9
- 10
Inspekt▲98AI-powered API proxy for automated debugging and security
Mar 2026 · inspekt-api.vercel.app · its alternatives →
- 11
TypeScript 6.0▲156The last TypeScript release built on JavaScript
Mar 2026 · typescriptlang.org · its alternatives →
- 12RA
2022 · github.com · its alternatives →
- 13AN
Hi HN! I'd love to seek your insights on a fullstack web framework that employs a different approach: no build. It's not a new concept. The folks as Preact mentioned it: https://preactjs.com/guide/v10/no-build-workflows/ However, in the Web Framework market, I've yet to find many that support both "no build" and "SSR". There's always some sorts of "client mount" and "server mount" and either has (or both have) to go through a build (bundling) process. With the build process, there comes additional maintenance efforts and cognitive load. I've enjoyed wrestling…
2025 · jsr.io · its alternatives →
- 14JZ
I built a cli tool that gets you started with TypeScript development with zero config. Initially created to solve my own problem but thought it might be useful for others as well. - SWC compiler - TypeScript type check support - Live reload support - .env file support - Path alias support - Typescript script runner - REPL support Please tell me I am not going down a rabbit hole.
2022 · github.com · its alternatives →
- 15
ContextGuard▲12Open-source security monitoring for MCP servers
Oct 2025 · github.com · its alternatives →
- 16DT
Hi HN - Peter from DBOS here with my co-founder Qian (qianl_cs) Today we want to share our TypeScript library for lightweight durable execution. We’ve been working on it since last year and recently released v2.0 with a ton of new features and major API overhaul. https://github.com/dbos-inc/dbos-transact-ts Durable execution means persisting the execution state of your program while it runs, so if it is ever interrupted or crashes, it automatically resumes from where it left off. Durable execution is useful for a lot of things: - Orchestrating long-running or…
2025 · github.com · its alternatives →
- 17RR
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com · its alternatives →
- 18GD
2019 · guardscript.com · its alternatives →
- 19
Secure your JavaScript supply chain – block malware packages
2022 · its alternatives →
- 20RD
Rev-dep is a dependency analysis and optimization CLI for JavaScript and TypeScript projects. It helps answer questions like: where is this file used, what are the entry points, are there circular dependencies, and which files or node_modules are unused. I recently rewrote it from scratch in Go to focus on performance and low memory usage. On large codebases (500k+ LOC), circular dependency detection runs in a few hundred milliseconds and is up to 175x faster than Madge in my benchmarks. Feature-wise it overlaps partially with tools like madge, dpdm, skott, and dependency-cruiser, but aims…
Feb 2026 · github.com · its alternatives →
- 21DA
Late last year, I was digging into some dependency-related tech debt, and struggling with how long it takes to run pnpm's introspection commands like 'pnpm why' in a medium-size monorepo. So I started working on a simple static site generator that would let me view the output of these expensive commands all at once, to make problems clearly visible instead of requiring deep exploration one at a time. Once I had that working, I realized I had enough data to add ticket tracking. It uses the data it gathers from the package manager to keep Linear or GitHub issues updated. And by auto-assigning…
Apr 2026 · descriptinc.github.io · its alternatives →
- 22AP
2022 · github.com · its alternatives →
- 23
devguard▲3Audit your Node.js + React project in one command
Jun 2026 · github.com · its alternatives →
- 24AS
Took a stab at building my own string diffing JS package. I built an interactive demo for TypeIt’s website (https://typeitjs.com/build-your-own) a while back. The approach I took to handle user input necessitated a way to calculate the difference between the versions of a user’s text input. I searched around for a package to help me out and found a couple of good ones (like fast-diff), but I either didn’t really like their API or didn’t want to take on a huge new dependency. Instead, I thought I’d give it a shot myself (famous last words). I dove into it having no real formal…
2022 · its alternatives →
Also compare
- Execute JavaScript in a WebAssembly QuickJS sandbox alternatives
- Socket – Secure your JavaScript supply chain alternatives
- Monogo – Evolve your go workspace to a real monorepo alternatives
- DepsGuard – One command to harden NPM/pnpm/yarn/bun/uv configs alternatives
- Socket alternatives
- Spall – WASM-based profiler for JavaScript and C and Odin alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →