Dev tools · alternatives · 2026
24 alternatives to NPMScan
Automated github dependency security scanner
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 2
GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.
2017 · dependabot.com · its alternatives →
- 3
Snyk for GitHub▲143Fix vulnerabilities in Node & npm dependencies with a click.
2016 · snyk.io · its alternatives →
- 4
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 5
- 6
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 7
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 8
I got fed up with endless PR reviews and the constant fear of missing a security bug, so I built Shieldcode. What it does: - Scans new pull requests for bugs and vulnerabilities automatically - Comments directly on GitHub with clear, actionable feedback - Works out of the box with no complex setup required Next up: NPM VScan, which will check your npm dependencies on every push for vulnerabilities or malware. I’d love to hear your thoughts and feedback! https://shieldcode.space
2025 · shieldcode.space · its alternatives →
- 9
GitJin▲116GitHub repos, issues, and PRs in one clear dashboard
Dec 2025 · gitjin.com · its alternatives →
- 10
- 11
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 12
- 13
GitBar▲126Every pull request, one menubar. GitHub, GitLab & Azure
Apr 2026 · gitbar.app · its alternatives →
- 14GA
2023 · gptduck.com · its alternatives →
- 15
Increase LLM visibility, signups and activated users
Nov 2025 · nakora.ai · its alternatives →
- 16
Scan and auto-fix GitHub vulnerabilities in seconds
Apr 2026 · package-helper.up.railway.app · its alternatives →
- 17
CommitCheck▲67Consistent GitHub commit messages, PR titles & descriptions
2019 · github.com · its alternatives →
- 18
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 19AI
2016 · npmjs.com · its alternatives →
- 20
Hi HN! I built NpmStars by BasicUtils to solve a simple but important problem: how can you quickly understand the popularity of an npm package? npmtrends shows downloads. star-history shows GitHub stars. But I always wanted one tool that combined both — in a fast, clean, and no-login experience. So I built NpmStars: - Compare npm downloads and GitHub stars in a single view - Daily, weekly, monthly download trends - GitHub star growth over time - Side-by-side visualizations - Sharable URLs with query preserved - Built with Next.js, React, and Recharts I hope this helps devs, maintainers, and…
2025 · basicutils.com · its alternatives →
- 21FM
2017 · forked.yannick.io · its alternatives →
- 22
node dependency trees as a service. Contribute to fiatjaf/node-dependencies-view development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 23
In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…
May 2026 · npmjs.com · its alternatives →
- 24
Also compare
- 4smart Packages Overview alternatives
- Dependabot – Automated Dependency Update PRs for Ruby, JS, Python and PHP alternatives
- Snyk for GitHub alternatives
- Tips to stay safe from NPM supply chain attacks alternatives
- RepoSecGo alternatives
- Safe-NPM – only install packages that are +90 days old alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →