Alternatives
Products that do what Open-Source Software Due Diligence does
Turn open-source Vibe Checks into objective readiness scores
- 1

- 2OO
Hey HN! We’re Max and Thibault building OpenStatus.dev an OpenSource synthetic monitoring platform with incident managements 1 min demo: https://twitter.com/mxkaske/status/1685666982786404352 We have just reached 2000 stars on GitHub https://github.com/openstatusHQ/openstatus We are really excited to hear your feedback/questions and connect further: our emails are [email protected] and [email protected]. Thank you!
2023 · openstatus.dev
- 3

- 4

- 5

- 6

Hey HN, I am building an open source platform to make on-call better and less stressful for engineers. We are building a tool that can silence alerts and help with debugging and root cause analysis. We also want to automate tedious parts of being on-call (running runbooks manually, answering questions on Slack, dealing with Pagerduty). Here is a quick video of how it works: https://youtu.be/m_K9Dq1kZDw I hated being on-call for a couple of reasons: * Alert volume: The number of alerts kept increasing over time. It was hard to maintain existing alerts. This would lead to a lot…
2024 · github.com
- 7

A curated list of free OSS developer-first security tools
2022
- 8OA
2016 · oswatch.net
- 9

- 10KG
Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com
- 11AO
2023 · github.com
- 12

- 13

- 14

- 15GO
Hey HN! We’re Jai and Sanket, co-founders of DeepSource (YC W20). We're open-sourcing Globstar (https://github.com/DeepSourceCorp/globstar), a static analysis toolkit that lets you easily write and run custom code quality and security checkers in YAML [1] or Go [2]. After 5+ years of building AST-based static analyzers that process millions of lines of code daily at DeepSource, we kept hearing a common request from customers: "How do we write custom checks specific to our codebase?" AppSec and DevOps teams have a lot of learned anti-patterns and security rules they want…
2025
- 16

- 17IB
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com
- 181O
2022 · github.com
- 19TV
Hey HN, Joe and Ethan from Tonic.ai here. We just released a new open-source python package for evaluating the performance of Retrieval Augmented Generation (RAG) systems. Earlier this year, we started developing a RAG-powered app to enable companies to talk to their free-text data safely. During our experimentation, however, we realized that using such a new method meant that there weren’t industry-standards for evaluation metrics to measure the accuracy of RAG performance. We built Tonic Validate Metrics (tvalmetrics, for short) to easily calculate the benchmarks we needed to meet in…
2023 · github.com
- 20IB
I work on R00M 101, a Reddit-based OSINT profiler. While building it, I realized most open-source intelligence (OSINT) tools are scattered across GitHub, outdated blog posts, or random Discords. So I put together a public-facing directory of 100+ OSINT tools used by analysts, journalists, and security folks, free, filterable, and categorized by risk, platform, and use case. The idea was to make something useful and no-friction. Built with static HTML + SQL backend + a lot of caffeine. Would love feedback on how to improve the UX or tool curation. If anyone wants to contribute tools or help…
2025 · r00m101.com
- 21OS
Hi HN, I made OSS Sustain Guard. After every high-profile OSS incident, I wonder about the packages I rely on right now. I can skim issues/PRs and activity on GitHub, but that doesn’t scale when you have tens or hundreds of dependencies. I built this to surface sustainability signals (maintainer redundancy, activity trends, funding links, etc.) and create awareness. It’s meant to start a respectful conversation, not to judge projects. These are signals, not truth; everything is inferred from public data (internal mirrors/private work won’t show up). Quick start: pip install…
Jan 2026 · onukura.github.io
- 22OS
I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.
Jan 2026 · certificate.brendonmatos.com
- 23WB
Hi. We just open sourced Bullet Train, a Feature Flag and Remote Config platform. It's a collection of tools: server API, admin front end and clients for a bunch of different platforms. Together they allow you to control feature flags and remote config across projects, environments and users. We realised that we were building ad-hoc feature flag stuff into individual projects over and over, so we had a look around to see if there was a way of doing this in a more formal manner. There are a few commercial solutions around but they were quite expensive and seemed to be aimed more at the…
2018
- 24CO
We just pushed out http://ossrank.com/compare which allows you to compare commit and contributor velocity for a group of OSS projects.
2022 · ossrank.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →