nowfound

Alternatives

Products that do what npm-daycare, an NPM proxy that filters out recent & small packages does

Hey all! npm-daycare is a simple NPM proxy built on Verdaccio which filters all packages that: - are younger than 48h (it will just provide an old version instead) - have fewer than 5,000 weekly downloads https://github.com/stack-auth/npm-daycare This is in response to the recent supply chain attacks that shattered the JavaScript ecosystem [1]. It's likely not a problem that will go away any time soon, so we figured we'd build something to protect against it. Doing this on the proxy layer means it will work across the entire system, as proxies are set globally. In the…

  1. 1SN

    This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

    Nov 2025 · github.com

  2. 2VO
  3. 3IV

    Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.

    2022 · playcode.io

  4. 4
    EasyNPM108

    Search & install command with one-click for npm packages

    2023

  5. 5

    Benchmark proxies for reliable, target-specific scraping

    29d ago · scrapeops.io

  6. 6DO

    I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…

    Jun 2026 · github.com

  7. 7
    Reflag117

    First ever self-cleaning feature flags for TypeScript

    Sep 2025

  8. 8TD

    Tabserve gives you a https url for localhost using only the browser (tabserve.dev). Take a look: https://tabserve.dev

    2023 · tabserve.dev

  9. 9FF

    I'm working at Sauce Labs on a fast MITM proxy. If you are using mitmproxy, Fiddler or Charles proxy in your job I believe you'll find it invaluable. Forwarder 1.1 is now available, complete with a Grafana Dashboard for effortless monitoring. We are committed to making it great. I welcome your feedback. Cheers Michał

    2023 · forwarder-proxy.io

  10. 10EP

    Hey HN, We made an Envoy Proxy playground [0] so we could test out our Envoy configs directly in the browser. This is based on Julia's work with Nginx Playround. [1] We forked that repo and added more Envoy to it. [2] Check it out! [0] - Envoy is a popular programmable proxy similar to Nginx or HAProxy that is popular with cloud-native setups: https://www.envoyproxy.io [1] - https://nginx-playground.wizardzines.com [2] - https://github.com/apoxy-dev/envoy-playground

    2023 · envoy-playground.apoxy.dev

  11. 11

    High performance secure & portable Rust functions in Node.js

    2020

  12. 12NP

    Hey guys! I just released a NPM package to integrate a visual scripting editor into any node project (React, Vue, Angular... you name it). Basically, the goal is to provide your users a way to customize, automate, create new features for your product. Just like an open-source community, but without the barrier of code. Here's the homepage of the project: https://luna-park.app And a small tutorial for visual scripting: https://luna-park.app/challenge

    2023 · npmjs.com

  13. 13IV

    Hello HN, for the past couple of months I've been working on Routify and wanted to share the progress made so far and hopefully get your opinion/feedback on it. Routify is a global serverless API gateway which handles routing, authentication, rate limiting, load balancing, monitoring, transformation etc (with more coming soon). Routify makes it easier to manage and secure public APIs. It's distributed across many regions globally and acts as a proxy between your clients and your services. You can configure it through the interface in a matter of minutes (no code required). There are…

    2024 · routify.to

  14. 14

    Block bad npm and pip packages. Before they download.

    May 2026 · veln.sh

  15. 15DO

    If you are tired of using Apache or Nginx to proxy your app and implement validation or limiting you may be interested in this hobbyist project. Thanks for all feedback.

    2024 · github.com

  16. 16
    PlayJS1

    A desktop JavaScript playground with real npm packages & AI

    11d ago · playjs.app

  17. 17BA

    Just shipped Burrito, a QuickJS wrapper for Nim that lets you embed a full JS REPL in your Nim apps. Call JS from Nim (and vice versa), run interactively, and more. Built in a weekend (mostly on my phone) - code, docs, tests, and a landing page all included!

    2025 · tapsterbot.github.io

  18. 18HR

    I recently came across an amazing post that really emphasizes the dangers associated with installing npm packages. It seems that every week a new supply chain attack occurs. In my opinion, the existing solutions for this don't quite cut it so I decided to create a library which provides runtime protection for Node. It currently protects against: - Unauthorized file system access - Unauthorized network access - Unauthorized command execution - (by way of exec/spawn) I just released the first beta version of the library and I'd love to hear what you guys think. Note: Protection is still…

    2022 · github.com

  19. 19

    Your programmable proxy for the modern web.

    Feb 2026

  20. 20

    Tunnel, inspect & mock localhost - no backend needed

    Apr 2026 · proxyhub.app

  21. 21NA
  22. 22AS

    Hi, this is my first npm package that is getting a couple of hundreds downloads. It's a super simple CLI time tracker, mostly suitable for 9 to 5 jobs I hope you check it out and tell me what you think. Demo and etc. https://github.com/omidfi/moro

    2017

  23. 23

    Proxy Service With The Most Undetectable IPs

    Feb 2026

  24. 24RO

    A few weekends ago I was bored looking for a small project. I decided to make a small chat app that supports SSL and can be deployed easily. Front-end: ReactJS, Redux, Websockets Back End: Node.JS, Redis, Websockets Here is the source: http://www.github.com/lgse/react-chat Here is a demo: http://chat.lgse.net username: pick whatever you like! server: chat.lgse.net:1337 encryption: SSL/TLS There are still a lot of todos, but very functional for a small weekend project. Comments welcomed!

    2016

Ranked by how close each launch is in meaning, then by votes. Refine with a description →