Dev tools · alternatives · 2026
24 alternatives to tlogistry.dev: Transparently Immutable Tags Using Sigstore's Rekor
Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. tlogistry.dev: Transparently Immutable Tags Using Sigstore's Rekor launched in 2022; newer entries below may have overtaken it.
- 1
- 2
- 3
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 4
Reblo▲71Provides document immutability and security using blockchain
2023 · reblo-services.com · its alternatives →
- 5
Releaslyy AI▲87Pulls in changes from your tools and generates release notes
Mar 2026 · releaslyy.com · its alternatives →
- 6
- 7
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 8
- 9
Bytesafe▲66A better way to control your software supply chain
2021 · bytesafe.dev · its alternatives →
- 10
API Radar▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Jan 2026 · apiradar.live · its alternatives →
- 11
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 12TD
Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe millions of packages and found that Malware typically follows certain patterns. We found this tool really useful to help understand the packages we our pulling into our software and wanted to share it with others. It's still early in and we have a lot more features that will be…
2023 · trustypkg.dev · its alternatives →
- 13
Hello HN. I am excited to share with you my new book, Bulletproof TLS and PKI. I've worked in this space since the very early days (think SSLv2), always frustrated with the fact that the field is vast but the documentation poor. That first led me to create SSL Labs (which ended up being very popular) and then the first edition of my book (in 2014), where I aimed to cover everything a curious person needed to know about SSL/TLS and PKI. Most importantly, it's a very practical book that you can use to just learn what you need at that moment. The second edition (just out) adds coverage of…
2022 · feistyduck.com · its alternatives →
- 14
Gain insights into blockchain hacks
2024 · solidityscan.com · its alternatives →
- 15
- 16
- 17
If you've built any web-based app in the last 15 years, you probably used something like Datadog, New Relic, Sentry, etc. to monitor and trace your app, right? Why should it be different when the app you're building happens to be using LLMs? So today we're open-sourcing OpenLLMetry-JS. It's an open protocol and SDK, based on OpenTelemetry, that provides traces and metrics for LLM JS/TS applications and can be connected to any of the 15+ tools that already support OpenTelemetry. Here's the repo: https://github.com/traceloop/openllmetry-js A few months ago we launched…
2024 · github.com · its alternatives →
- 18
Releasy▲89Test management platform & Issue tracker for agile teams
2023 · releasyapp.io · its alternatives →
- 19
Autsec▲66Automate tool to identify vulnerabilities in smart contracts
2023 · autsec.io · its alternatives →
- 20
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 21
- 22
webdog.ai▲14Watch websites for new links, removed links, or content changes. Open-source, self-hostable, PostgreSQL-backed.
Jul 2026 · webdog.ai · its alternatives →
- 23
The best new projects in crypto, curated daily.
2019 · onchain.today · its alternatives →
- 24
An awesome list of OSS developer-first security tools - boxyhq/awesome-oss-devsec
2022 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →