nowfound

Dev tools · alternatives · 2026

24 alternatives to Stack Graveyard

Find deprecated npm packages before they haunt your prod app

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.

    2022 · playcode.io · its alternatives →

  2. 2

    Monitor NuGet and NPM packages in your repositories

    2021 · its alternatives →

  3. 3SW
  4. 4

    This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

    Nov 2025 · github.com · its alternatives →

  5. 5

    An alternative to stack traces for your Go errors. Contribute to bracesdev/errtrace development by creating an account on GitHub.

    2023 · github.com · its alternatives →

  6. 6

    Catch unused, deprecated, bloated npm deps + alternatives

    Aug 2026 · npmjs.com · its alternatives →

  7. 7

    Bilal Tahir's playground for AI experiments, technical deep dives, and product engineering — built with Next.js, Tailwind CSS, and a love for shipping fast.

    2021 · hackyexperiments.vercel.app · its alternatives →

  8. 8PD
  9. 9

    Find every EOL dependency in your stack. Free. In 5 minutes.

    Apr 2026 · herodevs.com · its alternatives →

  10. 10DL

    After yesterday's release of Deno with package.json support[0] some discussions about how Deno handles dependencies have been coming up again. Since Deno's inception, I've mostly been watching it from the sidelines, dabbling a bit with it, and mostly been considering it a fad that will die out sooner or later. Ultimately, with the new package.json support nothing really changed regarding the dependency management story of Deno. It's still as awful as ever. Prompted by some discussions, I decided I would try to test how easy it would be to mount a typo-domain supply chain attack. And as…

    2023 · its alternatives →

  11. 11

    Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

    2022 · github.com · its alternatives →

  12. 12AA

    We've rolled out a feature for openbase.com that we think is a DX game changer for Node devs. Since the emergence of ECMA Script modules, it's been a continuous guessing game as to what kind of exports a package has. That's never really been discoverable without using a site like unpkg, or installing the package and inspecting package.json. Openbase now displays the ES Module support level (e.g. type of exports) on all of their package pages. We added this feature because our devs are some of the folks continually caught off guard by installing an NPM dependency only to find out it's…

    2022 · its alternatives →

  13. 13

    I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…

    Jun 2026 · github.com · its alternatives →

  14. 14DB

    Requirement: - Excellent feedback during development - Debugging with source maps Method: I'm using these scripts in package.json. "scripts": { "di": "node-inspector -d=7000 -p=8000 --save-live-edit --hidden node_modules/", "ds1": "babel ./server -d ./build/server -s -w", "ds2": "nodemon --watch ./build/server --delay 100ms --debug=7000 ./build/server/main.js" }, Then run "npm run ds1; npm run ds2; npm run di" Why: I took some time to put this together, after navigating all the tools out there. I personally find this to be "correct". Thought I'd…

    2016 · its alternatives →

  15. 15

    Rev-dep is a dependency analysis and optimization CLI for JavaScript and TypeScript projects. It helps answer questions like: where is this file used, what are the entry points, are there circular dependencies, and which files or node_modules are unused. I recently rewrote it from scratch in Go to focus on performance and low memory usage. On large codebases (500k+ LOC), circular dependency detection runs in a few hundred milliseconds and is up to 175x faster than Madge in my benchmarks. Feature-wise it overlaps partially with tools like madge, dpdm, skott, and dependency-cruiser, but aims…

    Feb 2026 · github.com · its alternatives →

  16. 16

    Search over 400,000 historical versions of nix packages on Nixhub.io. Find the Nix packages you need to get started on Devbox.

    2023 · nixhub.io · its alternatives →

  17. 17

    I finally got tired of XKCD #2347 living rent-free in my head, so I built Stacktower: a tool that takes any real package’s dependency graph and turns it into an actual tower of bricks. Along the way I had to wrestle some surprisingly spicy problems. Full blog post here: https://stacktower.io The result is half visualization tool, half love letter to the chaos of modern dependency trees. Open-source, works with PyPI, Cargo, npm, and more. Code: https://github.com/matzehuels/stacktower

    Dec 2025 · stacktower.io · its alternatives →

  18. 18

    Block bad npm and pip packages. Before they download.

    May 2026 · veln.sh · its alternatives →

  19. 19

    Configure once, prevent the next compromised package install

    May 2026 · depsguard.com · its alternatives →

  20. 20JB
  21. 21PD
  22. 22ZI
  23. 23

    Find your node package users and npm stats

    2025 · depend-o-meter.xyz · its alternatives →

  24. 24

    One dead-code scanner for mixed-language repos

    Apr 2026 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →