nowfound

Dev tools · alternatives · 2026

24 alternatives to Sandworm

Keep your JavaScript code secure and compliant with Sandworm

Sandworm is a security and compliance auditing tool for JavaScript projects that scans code and dependencies for vulnerabilities and license issues. It works with any JavaScript package manager and produces… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Sandworm launched in 2023; newer entries below may have overtaken it.

  1. 1

    Keep your JavaScript code secure and compliant with Sandworm

    2023 · sandworm.dev · its alternatives →

  2. 2

    Keep your JavaScript code secure and compliant with Sandworm - Sandworm

    2022 · github.com · its alternatives →

  3. 3

    This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…

    2024 · github.com · its alternatives →

  4. 4AW

    Hey HN, I wanted to show you a product a small team and I have been working on for 4 years. https://jam.dev It’s called Jam and it prevents product managers (like I used to be) from being able to create vague and un-reproducible bug tickets (like I used to create). It’s actually really hard as a non-engineer to file useful bug tickets for engineers. Like, sometimes I thought I included a screenshot, but the important information the engineer needed was what was actually right outside the boundary of the screenshot I took. Or I'd write that something "didn't work" but the engineer…

    2024 · its alternatives →

  5. 5

    Toolkit for building live coding experiences in browser

    2021 · sandpack.codesandbox.io · its alternatives →

  6. 6

    DeepScan is a cutting-edge static analysis tool for JavaScript. You can inspect all of your JavaScript code comprehensively.

    2017 · deepscan.io · its alternatives →

  7. 7SJ
  8. 8

    Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…

    2022 · socket.dev · its alternatives →

  9. 9

    Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.

    2022 · playcode.io · its alternatives →

  10. 10

    An open source security scanner for Visual Studio Code

    2020 · snyk.io · its alternatives →

  11. 11

    Find vulnerabilities in your JavaScript code for free

    2021 · socolivezb.tv · its alternatives →

  12. 12
    Gammacode▲269

    Web and Terminal agents that scan, fix, and ship secure code

    Oct 2025 · its alternatives →

  13. 13

    Hi! Jampack is a post-processing tool that takes the output of your Static Site Generator (aka SSG) and optimizes it for best user experience and best Core Web Vitals scores. As of today it can: - Optimize local images, CDN images or external images - Optimize above-the-fold vs below-the-fold - Limit images max width - Inline critical CSS - Prefetch links on scroll - Improve browser compatibility - Auto-fixes HTML issues - Warn for HTML accessibility issues - Compress all assets in the end It processes directly the static output so it's compatible with any SSG or framework. We are…

    2024 · github.com · its alternatives →

  14. 14

    A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.

    2020 · github.com · its alternatives →

  15. 15
  16. 16

    The fastest and most detailed tool for fixing bugs

    2023 · useflytrap.com · its alternatives →

  17. 17

    See how your users crashed your web application

    2016 · kuoll.com · its alternatives →

  18. 18

    A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate

    2025 · github.com · its alternatives →

  19. 19

    Catch JavaScript bugs on web applications with zero-effort

    2021 · meticulous.ai · its alternatives →

  20. 20

    Find the origin of any character in the DOM

    2019 · fromjs.com · its alternatives →

  21. 21

    Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…

    Feb 2026 · github.com · its alternatives →

  22. 22

    A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker

    2018 · github.com · its alternatives →

  23. 23PM
  24. 24

    jQuery Audit. Contribute to zertosh/jquery-audit development by creating an account on GitHub.

    2013 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →