Dev tools · alternatives · 2026
24 alternatives to Sandworm
Keep your JavaScript code secure and compliant with Sandworm
Sandworm is a security and compliance auditing tool for JavaScript projects that scans code and dependencies for vulnerabilities and license issues. It works with any JavaScript package manager and produces… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Sandworm launched in 2023; newer entries below may have overtaken it.
- 1

Keep your JavaScript code secure and compliant with Sandworm
2023 · sandworm.dev · its alternatives →
- 2

Keep your JavaScript code secure and compliant with Sandworm - Sandworm
2022 · github.com · its alternatives →
- 3

This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…
2024 · github.com · its alternatives →
- 4AW
Hey HN, I wanted to show you a product a small team and I have been working on for 4 years. https://jam.dev It’s called Jam and it prevents product managers (like I used to be) from being able to create vague and un-reproducible bug tickets (like I used to create). It’s actually really hard as a non-engineer to file useful bug tickets for engineers. Like, sometimes I thought I included a screenshot, but the important information the engineer needed was what was actually right outside the boundary of the screenshot I took. Or I'd write that something "didn't work" but the engineer…
2024 · its alternatives →
- 5

Toolkit for building live coding experiences in browser
2021 · sandpack.codesandbox.io · its alternatives →
- 6

DeepScan is a cutting-edge static analysis tool for JavaScript. You can inspect all of your JavaScript code comprehensively.
2017 · deepscan.io · its alternatives →
- 7SJ
2012 · engineering.versal.com · its alternatives →
- 8

Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 9

Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.
2022 · playcode.io · its alternatives →
- 10

An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 11
Reshift Security▲123Find vulnerabilities in your JavaScript code for free
2021 · socolivezb.tv · its alternatives →
- 12
Gammacode▲269Web and Terminal agents that scan, fix, and ship secure code
Oct 2025 · its alternatives →
- 13

Hi! Jampack is a post-processing tool that takes the output of your Static Site Generator (aka SSG) and optimizes it for best user experience and best Core Web Vitals scores. As of today it can: - Optimize local images, CDN images or external images - Optimize above-the-fold vs below-the-fold - Limit images max width - Inline critical CSS - Prefetch links on scroll - Improve browser compatibility - Auto-fixes HTML issues - Warn for HTML accessibility issues - Compress all assets in the end It processes directly the static output so it's compatible with any SSG or framework. We are…
2024 · github.com · its alternatives →
- 14

A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 15

2016 · corte.si · its alternatives →
- 16
Flytrap 2.0▲120The fastest and most detailed tool for fixing bugs
2023 · useflytrap.com · its alternatives →
- 17

See how your users crashed your web application
2016 · kuoll.com · its alternatives →
- 18

A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate
2025 · github.com · its alternatives →
- 19
Meticulous▲137Catch JavaScript bugs on web applications with zero-effort
2021 · meticulous.ai · its alternatives →
- 20

Find the origin of any character in the DOM
2019 · fromjs.com · its alternatives →
- 21

Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
Feb 2026 · github.com · its alternatives →
- 22

A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker
2018 · github.com · its alternatives →
- 23PM
2012 · proxino.com · its alternatives →
- 24

jQuery Audit. Contribute to zertosh/jquery-audit development by creating an account on GitHub.
2013 · github.com · its alternatives →
Also compare
- Sandworm Cloud Edition alternatives
- Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies alternatives
- Execute JavaScript in a WebAssembly QuickJS sandbox alternatives
- A web debugger an ex-Cloudflare team has been working on for 4 years alternatives
- Sandpack by CodeSandbox alternatives
- How to ensure JavaScript code quality alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →