nowfound

Dev tools · alternatives · 2026

24 alternatives to PkgDiet

Catch unused, deprecated, bloated npm deps + alternatives

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.

    2022 · playcode.io · its alternatives →

  2. 2

    Colin here, creator of Nub. I’ve had the general shape of this in mind for years. Nub runs your code with stock `node`, augmented with a `--require` preload hook[0] that adds a transpiler (oxc-powered, packaged as a Node-API add-on), registers a module resolution hook[1], and injects polyfills as needed for APIs like `Worker`, `Temporal`, etc. All purely additive, your code ultimately runs using Node’s actual engine & stdlib implementations. [0] https://nodejs.org/api/cli.html#-require-module [1]…

    Jun 2026 · github.com · its alternatives →

  3. 3WM
  4. 4

    Find deprecated npm packages before they haunt your prod app

    May 2026 · stackgraveyard.dev · its alternatives →

  5. 5

    I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…

    Jun 2026 · github.com · its alternatives →

  6. 6

    Package your Node.js project into an executable

    2017 · github.com · its alternatives →

  7. 7PD
  8. 8

    Rev-dep is a dependency analysis and optimization CLI for JavaScript and TypeScript projects. It helps answer questions like: where is this file used, what are the entry points, are there circular dependencies, and which files or node_modules are unused. I recently rewrote it from scratch in Go to focus on performance and low memory usage. On large codebases (500k+ LOC), circular dependency detection runs in a few hundred milliseconds and is up to 175x faster than Madge in my benchmarks. Feature-wise it overlaps partially with tools like madge, dpdm, skott, and dependency-cruiser, but aims…

    Feb 2026 · github.com · its alternatives →

  9. 9
    pkg.vc▲33

    Install npm packages from pull requests or branches

    2025 · pkg.vc · its alternatives →

  10. 10

    ➰ It's never been easier to try nodejs modules! Contribute to victorb/trymodule development by creating an account on GitHub.

    2016 · github.com · its alternatives →

  11. 11

    NodeJS dependency injection made easy in execution contexts. Inspiration taken from React hooks and Vue composables. - coderhammer/backhooks

    2023 · github.com · its alternatives →

  12. 12

    Configure once, prevent the next compromised package install

    May 2026 · depsguard.com · its alternatives →

  13. 13DB

    Requirement: - Excellent feedback during development - Debugging with source maps Method: I'm using these scripts in package.json. "scripts": { "di": "node-inspector -d=7000 -p=8000 --save-live-edit --hidden node_modules/", "ds1": "babel ./server -d ./build/server -s -w", "ds2": "nodemon --watch ./build/server --delay 100ms --debug=7000 ./build/server/main.js" }, Then run "npm run ds1; npm run ds2; npm run di" Why: I took some time to put this together, after navigating all the tools out there. I personally find this to be "correct". Thought I'd…

    2016 · its alternatives →

  14. 14

    ⚡ The fastest directory crawler & globbing library for NodeJS. Crawls 1m files in < 1s - thecodrr/fdir

    2020 · github.com · its alternatives →

  15. 15

    Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

    2022 · github.com · its alternatives →

  16. 16AI
  17. 17

    The best stupid idea for fixing problems in node modules. - maxchehab/quickfix

    2017 · github.com · its alternatives →

  18. 18

    Experimenting with Clojure 1.9's tools.deps and CLI - ethagnawl/tools-deps-experiment

    2018 · github.com · its alternatives →

  19. 19

    Automated github dependency security scanner

    Nov 2025 · npmscan.io · its alternatives →

  20. 20

    Explore dependencies of npm packages in the command-line.

    2016 · github.com · its alternatives →

  21. 21DL

    After yesterday's release of Deno with package.json support[0] some discussions about how Deno handles dependencies have been coming up again. Since Deno's inception, I've mostly been watching it from the sidelines, dabbling a bit with it, and mostly been considering it a fad that will die out sooner or later. Ultimately, with the new package.json support nothing really changed regarding the dependency management story of Deno. It's still as awful as ever. Prompted by some discussions, I decided I would try to test how easy it would be to mount a typo-domain supply chain attack. And as…

    2023 · its alternatives →

  22. 22

    In light of the ongoing npm supply chain compromises, I built safe-install: https:&#x2F;&#x2F;www.npmjs.com&#x2F;package&#x2F;@gkiely&#x2F;safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build&#x2F;install scripts: https:&#x2F;&#x2F;bun.com&#x2F;docs&#x2F;guides&#x2F;install&#x2F;trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…

    May 2026 · npmjs.com · its alternatives →

  23. 23

    Debugging is hard for LLMs, because they primarily depend on source code, and they don't have access to runtime state. I spent countless hours debugging code, and the only way I found LLMs useful for that, is to ask them to add log lines. That's annoying, because it pollutes my code and adds unnecessary diffs. So we made an MCP server that solve this problem. It gives MCP clients (like Claude Code) access to a NodeJS inspector, so they can: 1. set breakpoints 2. step in, step out, continue 3. fetch the current execution location 4. read console output 5. run JS using eval To try: 1. run a…

    2025 · github.com · its alternatives →

  24. 24

    Block bad npm and pip packages. Before they download.

    May 2026 · veln.sh · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →