Dev tools · alternatives · 2026

24 alternatives to Stack Graveyard
Find deprecated npm packages before they haunt your prod app
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.
2022 · playcode.io · its alternatives →
- 2

Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 3SW
2016 · npmdiscover.com · its alternatives →
- 4

This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 5

An alternative to stack traces for your Go errors. Contribute to bracesdev/errtrace development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 6
PkgDiet▲4Catch unused, deprecated, bloated npm deps + alternatives
Aug 2026 · npmjs.com · its alternatives →
- 7

Bilal Tahir's playground for AI experiments, technical deep dives, and product engineering — built with Next.js, Tailwind CSS, and a love for shipping fast.
2021 · hackyexperiments.vercel.app · its alternatives →
- 8PD
2021 · pickbetterpack.com · its alternatives →
- 9
EOL Dataset▲64Find every EOL dependency in your stack. Free. In 5 minutes.
Apr 2026 · herodevs.com · its alternatives →
- 10DL
After yesterday's release of Deno with package.json support[0] some discussions about how Deno handles dependencies have been coming up again. Since Deno's inception, I've mostly been watching it from the sidelines, dabbling a bit with it, and mostly been considering it a fad that will die out sooner or later. Ultimately, with the new package.json support nothing really changed regarding the dependency management story of Deno. It's still as awful as ever. Prompted by some discussions, I decided I would try to test how easy it would be to mount a typo-domain supply chain attack. And as…
2023 · its alternatives →
- 11

Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 12AA
We've rolled out a feature for openbase.com that we think is a DX game changer for Node devs. Since the emergence of ECMA Script modules, it's been a continuous guessing game as to what kind of exports a package has. That's never really been discoverable without using a site like unpkg, or installing the package and inspecting package.json. Openbase now displays the ES Module support level (e.g. type of exports) on all of their package pages. We added this feature because our devs are some of the folks continually caught off guard by installing an NPM dependency only to find out it's…
2022 · its alternatives →
- 13

I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 14DB
Requirement: - Excellent feedback during development - Debugging with source maps Method: I'm using these scripts in package.json. "scripts": { "di": "node-inspector -d=7000 -p=8000 --save-live-edit --hidden node_modules/", "ds1": "babel ./server -d ./build/server -s -w", "ds2": "nodemon --watch ./build/server --delay 100ms --debug=7000 ./build/server/main.js" }, Then run "npm run ds1; npm run ds2; npm run di" Why: I took some time to put this together, after navigating all the tools out there. I personally find this to be "correct". Thought I'd…
2016 · its alternatives →
- 15

Rev-dep is a dependency analysis and optimization CLI for JavaScript and TypeScript projects. It helps answer questions like: where is this file used, what are the entry points, are there circular dependencies, and which files or node_modules are unused. I recently rewrote it from scratch in Go to focus on performance and low memory usage. On large codebases (500k+ LOC), circular dependency detection runs in a few hundred milliseconds and is up to 175x faster than Madge in my benchmarks. Feature-wise it overlaps partially with tools like madge, dpdm, skott, and dependency-cruiser, but aims…
Feb 2026 · github.com · its alternatives →
- 16

Search over 400,000 historical versions of nix packages on Nixhub.io. Find the Nix packages you need to get started on Devbox.
2023 · nixhub.io · its alternatives →
- 17

I finally got tired of XKCD #2347 living rent-free in my head, so I built Stacktower: a tool that takes any real package’s dependency graph and turns it into an actual tower of bricks. Along the way I had to wrestle some surprisingly spicy problems. Full blog post here: https://stacktower.io The result is half visualization tool, half love letter to the chaos of modern dependency trees. Open-source, works with PyPI, Cargo, npm, and more. Code: https://github.com/matzehuels/stacktower
Dec 2025 · stacktower.io · its alternatives →
- 18
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 19
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 20JB
2015 · jsbundler.com · its alternatives →
- 21PD
2019 · diff.intrinsic.com · its alternatives →
- 22ZI
2016 · zpder.herokuapp.com · its alternatives →
- 23

Find your node package users and npm stats
2025 · depend-o-meter.xyz · its alternatives →
- 24

Also compare
- I've been making JavaScript sandbox alone for 6 years alternatives
- 4smart Packages Overview alternatives
- See what other NPM packages everyone else is using alternatives
- Safe-NPM – only install packages that are +90 days old alternatives
- Error return traces for Go, inspired by Zig alternatives
- PkgDiet alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →