nowfound

Dev tools · alternatives · 2026

24 alternatives to Socket

Secure your JavaScript supply chain

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Socket launched in 2022; newer entries below may have overtaken it.

  1. 1

    Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…

    2022 · socket.dev · its alternatives →

  2. 2

    Secure your JavaScript supply chain – block malware packages

    2022 · socket.dev · its alternatives →

  3. 3

    Keep your Python code secure and compliant with Socket

    2023 · socket.dev · its alternatives →

  4. 4

    Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

    2025 · github.com · its alternatives →

  5. 5

    Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome extension: https://chrome.google.com/webstore/detail/socket-security/jb... Firefox add-on: https://addons.mozilla.org/en-US/firefox/addon/socket-securi... Socket scans NPM packages for malware, vulnerabilities, code smell, and…

    2023 · chrome.google.com · its alternatives →

  6. 6

    A better way to control your software supply chain

    2021 · bytesafe.dev · its alternatives →

  7. 7
    hop.js▲129

    A fast, free, privacy-first CDN for open-source projects

    2025 · hopjs.bunny.net · its alternatives →

  8. 8

    Osgood is a secure, fast, and simple platform for running JavaScript HTTP servers. - IntrinsicLabs/osgood

    2019 · github.com · its alternatives →

  9. 9
    Sandworm▲304

    Keep your JavaScript code secure and compliant with Sandworm

    2023 · sandworm.dev · its alternatives →

  10. 10

    This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…

    2024 · github.com · its alternatives →

  11. 11

    Looking to hire dedicated JavaScript developers? We’ve got you covered with our ultimate hiring guide. Let us help you today!

    2012 · gun.io · its alternatives →

  12. 12PM
  13. 13

    aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.

    2015 · appcanary.com · its alternatives →

  14. 14DI
  15. 15

    Add WebSocket to your app within 5 min, no vendor lock-in

    2022 · myws.dev · its alternatives →

  16. 16

    In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…

    May 2026 · npmjs.com · its alternatives →

  17. 17

    A realtime communication framework for Node.js. Contribute to stepchowfun/socket.js development by creating an account on GitHub.

    2016 · github.com · its alternatives →

  18. 18
    Cycode▲68

    Complete software supply chain security

    2022 · cycode.com · its alternatives →

  19. 19

    A crate to protect against malicious JSON payloads. - ADD-SP/json-threat-protection.rs

    2024 · github.com · its alternatives →

  20. 20

    Complete Protection Against Third-Party JavaScript Threats

    Feb 2026 · cellwall.io · its alternatives →

  21. 21

    I recently came across an amazing post that really emphasizes the dangers associated with installing npm packages. It seems that every week a new supply chain attack occurs. In my opinion, the existing solutions for this don't quite cut it so I decided to create a library which provides runtime protection for Node. It currently protects against: - Unauthorized file system access - Unauthorized network access - Unauthorized command execution - (by way of exec/spawn) I just released the first beta version of the library and I'd love to hear what you guys think. Note: Protection is still…

    2022 · github.com · its alternatives →

  22. 22

    Protect your business, mitigate risk, stay competitive

    2023 · bitedata.io · its alternatives →

  23. 23

    Supply chain protection that blocks malware at install

    Jun 2026 · westbayberry.com · its alternatives →

  24. 24

    Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

    2022 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →