Alternatives
Products that do what OSS sustain guard – Sustainability signals for OSS dependencies does
Hi HN, I made OSS Sustain Guard. After every high-profile OSS incident, I wonder about the packages I rely on right now. I can skim issues/PRs and activity on GitHub, but that doesn’t scale when you have tens or hundreds of dependencies. I built this to surface sustainability signals (maintainer redundancy, activity trends, funding links, etc.) and create awareness. It’s meant to start a respectful conversation, not to judge projects. These are signals, not truth; everything is inferred from public data (internal mirrors/private work won’t show up). Quick start: pip install…
- 1KG
Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com
- 2
- 3FG
Hi HN, I'm Antoine Zambelli, AI Director at Texas Instruments. I built Forge, an open-source reliability layer for self-hosted LLM tool-calling. What it does: - Adds domain-and-tool-agnostic guardrails (retry nudges, step enforcement, error recovery, VRAM-aware context management) to local models running on consumer hardware - Takes an 8B model from ~53% to ~99% on multi-step agentic workflows without changing the model - just the system around it - Ships with an eval harness and interactive dashboard so you can reproduce every number I wanted to run a handful of always-on agentic systems…
May 2026 · github.com
- 4IB
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com
- 5
- 6OA
2016 · oswatch.net
- 7
- 8
- 9KO
Hi Hacker News! Shahar and Tal from Keep here. We're thrilled to announce that we're open-sourcing our alerting CLI tool, Keep (https://github.com/keephq/keep). Designed by developers for developers, Keep streamlines and simplifies alerting, making it a first-class citizen within the development process. Think of Keep as Prometheus Alertmanager but for all observability tools, with a simple and intuitive (GitHub actions-like) syntax. We believe that alerting has historically been neglected in existing monitoring platforms, leading to subpar alerting practices. With Keep,…
2023 · github.com
- 10PS
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
2024
- 11
- 12IG
Hey HN, For years, my local development setup has been a fragile mess of tools that never quite played nicely together. On my mac, it was a constant battle with Homebrew services starting (or not starting) on boot, conflicting PHP and Node versions managed by `asdf` or `nvm`, and a collection of `docker-compose.yml` files that I'd copy-paste and tweak for every single project. The cognitive load was just too high. Setting up SSL was another chore involving `mkcert`. Sharing a quick demo with a colleague meant firing up ngrok. And if I wanted to run two projects that needed different versions…
Oct 2025 · servbay.com
- 13
- 14
- 15SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com
- 16ET
2018 · youtube.com
- 17IE
2021 · repobeats.axiom.co
- 18CO
We just pushed out http://ossrank.com/compare which allows you to compare commit and contributor velocity for a group of OSS projects.
2022 · ossrank.com
- 19
Shared abuse intelligence for GitHub maintainers
May 2026 · oss-protector.raedbahri90.workers.dev
- 20
- 21OG
it's a community-developed product to automate and incentivize both code and non-code contributions to open source projects. we've launched the public beta with a hackathon during Hacktoberfest. the folks on reddit hate the engagement bait. i think many folks exchange reach for a pot. monetary benefit, we're just giving everyone the chance to do so. for maintainers oss.gg automates a lot of the overhead that comes with managing hundreds of contributors. what do you think?
2024 · oss.gg
- 22TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev
- 23
- 24GM
2020 · gitspo.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →