Alternatives
Products that do what TypeScript Security Scanner does
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
- 1BC
Hello there, I’m Guillaume, the cofounder and CEO of Bearer, a code security startup trying to rethink security products for a developer-first World. 7 months ago we introduced on HN, Bearer CLI (https://github.com/Bearer/bearer), our free and open code security scanner supporting at the time only Ruby and JavaScript applications. We’ve been working very hard with the team, thanks to community feedback to bring tons of new features as well as more language support to become everyone’s go-to code security solution. Just to name a few major features: - Native integration…
2023 · github.com
- 2
- 3
- 4
- 5
- 6TN
2020 · github.com
- 7TI
Spent a week in the break building a pre-compiler that brings type safety to runtime. Still pretty early, but generally does what it says. Looking for feedback, code that breaks it (check out the playground), ideas etc.
Jan 2026 · typical.elliots.dev
- 8LB
Howdy friends! Tell me if this is an atrociously terrible idea - I've been working on building a leetcode for clientside devs so we can practice React and Javascript interview questions in a more concise way, I call it clientside.dev I just finished a beta version of it yesterday and plan on releasing it with many more problems on Jan 1st but it's there if you wanna play with it open to any ideas / feedback however mean or nice it may be :)
2022 · vacation-call-335691.framer.app
- 9OS
Hello HN, I built this because I wanted to give Claude Desktop access to my Notion workspace without running a flaky local Python script via stdio. This is a Node.js/Express implementation of the Model Context Protocol (MCP) that uses SSE (Server-Sent Events) for transport. It’s designed to be stateless and deployable as a container (I'm hosting it on Apify, but it works anywhere with Node). The Stack: TypeScript + Express @modelcontextprotocol/sdk Zod for input validation Bearer Auth for security (since it exposes an HTTP endpoint) Capabilities: It allows the LLM to search pages,…
Dec 2025 · github.com
- 10IB
Link: https://docs.trysoma.ai/ For the past ~9 months I’ve been building Soma, an open-source AI agent & workflow runtime written in Rust, with a TypeScript SDK (Python coming soon). It’s not a framework; it’s meant to sit underneath whatever agent/tooling code you already write (Vercel AI SDK, LangChain, custom code, etc.). It provides features around your framework + a better DX for building agents. I’ve tried to take a Next.JS model: open-source, good DX, self-deployable. I originally set out to build a vertical back-office/operations product for SMEs. I needed a…
Dec 2025 · docs.trysoma.ai
- 11BG
We originally set out to solve complex debugging headaches and useless alerts caused by traditional security scanners in our own projects. Static Analysis (SAST) flagged too much noise because it couldn't verify runtime context, while Dynamic Analysis (DAST) missed internal logic bugs because it treated the app like a black box. We built a CLI tool to bridge this gap using grey box testing from a red team approach. We use internal knowledge of the codebase to guide parallel execution, allowing us to find complex or hidden logic errors and attack paths standard linters/scanners miss. The…
Dec 2025 · bloodhoundsecurity.ca
- 12JA
May 2026 · github.com
- 13ID
Hi HN! I’m Bobbie Chen, Product Manager for Fraud and Security at Stytch. Today we are launching IsAgent: a lightweight JavaScript SDK that tries to detect agentic traffic on the frontend, enabling you to build agent-friendly experiences. You can try it out on our site at IsAgent.dev or install it via: npm install @stytch/is-agent (requires registration to use) Try viewing IsAgent.dev as a human. Then try using ChatGPT Agent to view the page: "Visit IsAgent.dev, wait a few seconds, and then take a screenshot." (or, toggle the switcher at the top) We built this because we’ve had a lot…
2025 · isagent.dev
- 14IB
Code base is here https://github.com/clairefro/aribotle Screenshots and learnings in tweet https://twitter.com/clairefroe/status/1684692302843838464?t=... I experimented with a "Bring your own API Key" approach that I think is sufficiently secure. I'll Venmo $50 to whoever can hack my OpenAI API key
2023 · twitter.com
- 15SR
Hey HN! I'm the author of SharpTS, a TypeScript interpreter and ahead-of-time compiler written in C#. *What makes it different:* - Dual execution modes - interpret TypeScript directly OR compile to native .NET executables - Full C# interop - compile TypeScript to DLLs that C# projects can reference with full type safety *What works today:* - Core TypeScript: classes, interfaces, generics, async/await, decorators - Advanced types: union/intersection types, literal types, type guards - Compiles to verifiable .NET IL with performance comparable to hand-written C# - 80+ unit tests,…
Jan 2026 · github.com
- 16VL
I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…
Mar 2026 · github.com
- 17TA
Hi HN! This Christmas I made `tysm`, a rust crates which simplifies using ChatGPT with Structured Outputs. Essentially you just tell it the rust type you want the output to conform to, and it handles creating the JSON Schema, passing it to ChatGPT's chat-completions API, and deserializing the response. Structured Outputs are very useful because they guarantee that the response will conform to whatever type you expect. I'm already finding my crate very useful since I love using Structured Outputs but I hate writing JSON Schemas myself. Technical details for rust heads: To generate the JSON…
2024 · github.com
- 18
You write a standard solution, just like on LeetCode, and run it through the CLI. It identifies the problem by ID or title, executes your code against local test cases, and shows the result. It currently supports around 1000 problems and multiple languages, including Python, C++, Rust, Java, Go, TypeScript, Swift, and others. The project is still an MVP. System design, SQL, and concurrency problems are not supported yet, but support for more problem types is planned. Made in Haskell!
25d ago · github.com
- 19LA
I created LemmaScript to compile TypeScript to a verification backend (Dafny or Lean) and prove properties on the systematically derived model. I'll keep developing this, but I have a few case studies already, and it looks quite promising, with the caveat that each case study pushed the development of the core further. I can support both greenfield and brownfield projects, and in many cases, verification can be in-place: the TypeScript source is just annotated and verified independently but runs as is.
Apr 2026 · github.com
- 20FT
Hi HN, I’ve been building 'Fragno', a toolkit for building full-stack TypeScript libraries that work seamlessly across frameworks like Next.js and SvelteKit. Traditional libraries are built to integrate on either the frontend or backend. Glue code ends up being re-implemented for every project: API routes, documentation (OpenAPI), client-side integration, etc. With Fragno, you can write libraries that include API routes and client-side hooks/logic. Users can integrate a Fragno library into their application with just a couple of lines of code. This embeds the API routes and lets them…
Oct 2025 · fragno.dev
- 21
- 22MB
hi! I’m a 17 y/o dev and I made this so I could show my wpm in code rather than just normal text :) this was my first project that I made awhile back but wanted to share it today. I used React and got the LeetCode samples by webscraping a site that had all the solutions. you can read more about the site in the "about" page. here's the repo: https://github.com/max-lee-dev/hackertype https://twitter.com/maxleedev
2024 · hackertype.dev
Ranked by how close each launch is in meaning, then by votes. Refine with a description →