Dev tools · alternatives · 2026
24 alternatives to PyDependencyCheck
Understand every dependency instantly
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
PyDeps▲9The Most Complete Python Package Dependency Explorer
Jul 2026 · pydeps.com · its alternatives →
- 2

GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.
2017 · dependabot.com · its alternatives →
- 3

A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 4

deptry 0.14.0 was just released, bringing significant speed improvements: It is now up to 10 times faster than the previous release! For those unfamiliar with deptry; deptry is a command line tool to check for issues with dependencies in a Python project, such as unused or missing dependencies. GitHub: https://github.com/fpgmaas/deptry For some benchmarks of the new release, see the release notes: https://github.com/fpgmaas/deptry/releases/tag/0.14.0 The performance improvement was achieved by leveraging Rust to parse the AST and extract…
2024 · github.com · its alternatives →
- 5
PkgDiet▲4Catch unused, deprecated, bloated npm deps + alternatives
Aug 2026 · npmjs.com · its alternatives →
- 6

- 7

Explore the architecture of apps with an interactive graph
2021 · its alternatives →
- 8

- 9

node dependency trees as a service. Contribute to fiatjaf/node-dependencies-view development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 10

Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 11

- 12
Dependabot▲96Automated dependency updates for Ruby and JavaScript
2017 · github.com · its alternatives →
- 13TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev · its alternatives →
- 14

Pipask is a drop-in replacement for pip that addresses a serious security flaw: standard pip executes arbitrary code from source distributions during dependency resolution, without warning or consent. Pipask retrieves metadata through PyPI's JSON API first, then checks repository popularity, download counts, package age, and known vulnerabilities before allowing installation. It presents you with a pretty report and asks for you consent with installation, giving you control over what code runs on your system. More details in the intro blog post:…
2025 · github.com · its alternatives →
- 15

Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for…
2022 · github.com · its alternatives →
- 16
- 17

- 18PI
License and distribute your packages with our private npm registry.
2013 · pkghub.io · its alternatives →
- 19

Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 20
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 21

In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…
May 2026 · npmjs.com · its alternatives →
- 22AI
2016 · npmjs.com · its alternatives →
- 23

- 24NF
2014 · vuln.pub · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →