Alternatives
Products that do what Socket does
Secure your JavaScript supply chain
- 1

- 2

- 3

- 4

- 5

- 6

- 7

- 8

- 9OA
2019 · github.com
- 10

- 11

- 12SO
2015 · scriptobservatory.org
- 13

- 14SJ
2016 · github.com
- 15TS
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
2023
- 16SS
2017 · github.com
- 17AA
We've rolled out a feature for openbase.com that we think is a DX game changer for Node devs. Since the emergence of ECMA Script modules, it's been a continuous guessing game as to what kind of exports a package has. That's never really been discoverable without using a site like unpkg, or installing the package and inspecting package.json. Openbase now displays the ES Module support level (e.g. type of exports) on all of their package pages. We added this feature because our devs are some of the folks continually caught off guard by installing an NPM dependency only to find out it's…
2022
- 18MA
2022 · github.com
- 19RA
I've been building Rivers for the past 7 months, an asset-based orchestrator. The core components such as planning, scheduling etc are in Rust and the user facing API is in Python. My most recent release adds OIDC and forward auth support. Security shouldn't be paywalled :)
Jul 2026 · github.com
- 20
- 21AO
I’ve lost count of how many times a junior engineer accidentally pushed something into a dev branch that either contained secrets/credentials etc. or that leaked those into logs/std. out. Secure-log prevent logging for apps on production, scan for Secrets and remove them from logging. No more console.log().
2024 · github.com
- 22AR
You might have heard that scaling WebSocket infrastructure is not an easy task. It was true–until recently. We built the open source real-time server, AnyCable, that deploys to Fly.io in one command (and configures itself), and the SDK for serverless JS/TS that allows you to build real-time features without any 3d-party PaaS. We call it a real-time server, because it has WebSockets and more, and it’s easy to run and scale. Here’s all you need to add real-time to your Next.js/Vercel app: – Deploy AnyCable to Fly.io with one command (see the docs) – In your Vercel app add one…
2023 · docs.anycable.io
- 23IM
2020 · github.com
- 24IB
Logging and tools like Sentry are a thing of the past. A while back on a night out in northern Norway, I had to start debugging a critical production bug that broke the payment flow of my SaaS product. I had limited time to fix the bug or I would have lost about ~1K profit. Super stressful. I had logging and Sentry in place, but neither helped me reproduce or find the root cause of the bug. Ever since, I started thinking; why can’t we just have a tool that you setup once, and that allows us to reproduce every function call and function that the user ran before the bug? This is how the idea…
2023 · useflytrap.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →