Alternatives
Products that do what Socket for GitHub 1.0 does
Secure your JavaScript supply chain – block malware packages
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9DI
2017 · darkwire.io
- 10
- 11
- 12
- 13AG
2013 · github.com
- 14VN
If you are worried about the recent Lazarus group software supply chain attack, you should consider having guard rails that is more than conventional SCA. `vet` detects the package (version) published in the report as malware. Try out vet, its free and open source: https://github.com/safedep/vet More details on the attack: https://www.nodejs-security.com/blog/north-korea-malware-on-...
2023 · github.com
- 15SJ
2016 · github.com
- 16TS
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
2023
- 17MA
2022 · github.com
- 18PI
People seem to be blindly hooking up their OpenClaw’s to their personal data. So, I built runtime controls to prevent at the least, very simple prompt injection attacks. Once installed, it hooks to Node.js child_process module in the gateway process and listens to tool calls and their response streams. And a fetch hook to monitor user prompts (both could’ve been through fetch, happy to discuss why this whole layer couldn’t just be a proxy). There are two layers of protection: First: Whenever there is a read-only tool call whose response an attacker can modify, we extract that part of the…
Feb 2026 · github.com
- 19
Proves vulnerabilities before reporting them.
8d ago · dashboard-seven-self-13.vercel.app
- 20RA
2017 · beta.secureit.io
- 21UB
2014 · bitcoinvigil.com
- 22RA
I've been building Rivers for the past 7 months, an asset-based orchestrator. The core components such as planning, scheduling etc are in Rust and the user facing API is in Python. My most recent release adds OIDC and forward auth support. Security shouldn't be paywalled :)
Jul 2026 · github.com
- 23SE
2019 · github.com
- 24IB
Logging and tools like Sentry are a thing of the past. A while back on a night out in northern Norway, I had to start debugging a critical production bug that broke the payment flow of my SaaS product. I had limited time to fix the bug or I would have lost about ~1K profit. Super stressful. I had logging and Sentry in place, but neither helped me reproduce or find the root cause of the bug. Ever since, I started thinking; why can’t we just have a tool that you setup once, and that allows us to reproduce every function call and function that the user ran before the bug? This is how the idea…
2023 · useflytrap.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →