Dev tools · alternatives · 2026

24 alternatives to PackageSentinel

A tool to help developers stay safe with npm dependencies.

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1. 1
   Safe-NPM – only install packages that are +90 days old▲90

   This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

   Nov 2025 · github.com · its alternatives →

2. 2
   Layouts.dev▲699

   A notebook for building interfaces with Tailwind & shadcn/UI

   2024 · layouts.dev · its alternatives →

3. 3AI
   Auto install npm dependencies as you code▲60

   2016 · npmjs.com · its alternatives →

4. 4
   I made a CLI tool to create web extensions with no build configuration▲381

   Hello HN! I'm the creator and solo developer of Extension.js, a development tool for browser extensions with built-in support for TypeScript, WebAssembly, React, and modern JavaScript. Developers use it to spend less time configuring the compilation config or learning new frameworks and more time actually writing code. Most projects similar to Extension.js rely on some sort of abstraction or configuration to get started, making the initial development process slow given the extra learning curve and setup guidelines. By using Extension.js, adding the package to your npm scripts is all it…

   2024 · github.com · its alternatives →

5. 5
   Reactpack – one command to build your React front end▲108

   :package: build your react apps with one command and one `npm i`. - olahol/reactpack

   2016 · github.com · its alternatives →

6. 6
   Koidex▲380

   Know if a package, extension, or AI model is actually safe

   Feb 2026 · dex.koi.security · its alternatives →

7. 7SW
   See what other NPM packages everyone else is using▲67

   2016 · npmdiscover.com · its alternatives →

8. 8
   Safe-install – safer NPM installs with trusted build dependencies▲19

   In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…

   May 2026 · npmjs.com · its alternatives →

9. 9
   npm install actual-malware▲55

   Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

   2022 · github.com · its alternatives →

10. 10
    Tips to stay safe from NPM supply chain attacks▲96

    Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

    2025 · github.com · its alternatives →

11. 11
    4smart Packages Overview▲75

    Monitor NuGet and NPM packages in your repositories

    2021 · its alternatives →

12. 12
    EasyNPM▲108

    Search & install command with one-click for npm packages

    2023 · easynpm.netlify.app · its alternatives →

13. 13
    NDesk▲97

    Install and run Javascript/Node.js projects in a GUI

    2020 · ndesk.app · its alternatives →

14. 14
    A curated list of insecure Python packages▲94

    A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.

    2016 · github.com · its alternatives →

15. 15
    ied – an alternative package manager for Node▲86

    :package: Like npm, but faster - an alternative package manager for Node - alexanderGugel/ied

    2015 · github.com · its alternatives →

16. 16
    Essential React, a minimal skeleton for building React apps using ES6▲73

    A minimal skeleton for building testable React apps using Babel - pheuter/essential-react

    2015 · github.com · its alternatives →

17. 17
    Hosted JavaScript dependency tree graphs for GitHub READMEs▲56

    node dependency trees as a service. Contribute to fiatjaf/node-dependencies-view development by creating an account on GitHub.

    2017 · github.com · its alternatives →

18. 18
    NPMScan▲7

    Automated github dependency security scanner

    Nov 2025 · npmscan.io · its alternatives →

19. 19
    Extracting React apps from Figma Make's undocumented binary format▲55

    How I reverse-engineered Figma Make’s binary format to extract complete React applications. A deep dive into ZIP archives, Kiwi schemas, and dual compression algorithms.

    Jan 2026 · albertsikkema.com · its alternatives →

20. 20
    Chrome extension to navigate dependencies in Node.js projects on Github▲34

    A Google Chrome extension for navigating Node.js `require()`s in Github. - lxe/require-navigator

    2014 · github.com · its alternatives →

21. 21JB
    Jsbundler – Bundle npm packages and use them in the browser▲16

    2015 · jsbundler.com · its alternatives →

22. 22
    Packagr.app – a private package repository with security scanning▲43

    Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.

    2019 · packagr.app · its alternatives →

23. 23
    Xkcd #2347 lived in my head, so I built the dependency tower for real▲36

    I finally got tired of XKCD #2347 living rent-free in my head, so I built Stacktower: a tool that takes any real package’s dependency graph and turns it into an actual tower of bricks. Along the way I had to wrestle some surprisingly spicy problems. Full blog post here: https://stacktower.io The result is half visualization tool, half love letter to the chaos of modern dependency trees. Open-source, works with PyPI, Cargo, npm, and more. Code: https://github.com/matzehuels/stacktower

    Dec 2025 · stacktower.io · its alternatives →

24. 24
    Bumpgen – upgrade NPM packages using AI▲20

    Hey HN, we are building bumpgen (https://github.com/xeol-io/bumpgen/) to remove the toil of fixing breaking changes during version bumps. bumpgen bumps your npm package version then generates the fixes to potential breaking changes. There were some interesting challenges we encountered using an LLM to fix breaking changes: [1] Finding the breaking changes → know how is a dependency used through the codebase [2] Knowing how to fix the a breaking change → know how the dependency has changed from one version to another [3] Understanding how the fix has modified existing…

    2024 · github.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →