NPMScan

What it does

Ever opened GitHub on a Monday and found 47 Dependabot PRs waiting for you? 😅 Keeping npm dependencies secure and up to date across multiple repos feels impossible. Dependabot helps, but when every repo creates tens of PRs, the noise hides what actually matters. Therefore, I built npmscan, a dashboard that scans all your GitHub repos for package.json files, highlights vulnerable or outdated dependencies, and shows you what to fix first.

• 
  Snyk for GitHub2016 · ▲143

  Fix vulnerabilities in Node & npm dependencies with a click.

• TT
  Tips to stay safe from NPM supply chain attacksSep 2025 · github.com · ▲96

  Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

• 
  RepoSecGo2025 · ▲88

  Know before you clone with instant GitHub security insights

• 
  GitHub Repo Visibility AnalyzerNov 2025 · ▲141

  Make devs notice your repo

• SN
  Safe-NPM – only install packages that are +90 days oldNov 2025 · github.com · ▲90

  This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

• 
  DepsGuardMay 2026 · depsguard.com · ▲10

  Configure once, prevent the next compromised package install

• 
  Dograh▲592

  The open source VAPI alternative

  Dev tools · 26d ago · dograh.com

• 
  Meridian▲530

  Don't let your work go unnoticed. Get promoted!

  Dev tools · 21d ago · meridiona.com

• 
  x1▲516

  Lovable for iPhone apps go from idea to App Store

  Dev tools · 12d ago · x1.new

• 
  Open-Source eInk Bike Computer▲408

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 2d ago · opentrailpaper.com

• 
  The GTM Co-Founder▲402

  Open-source GTM skills for technical founders

  Dev tools · 30d ago · gtmcofounder.com

• 
  Nuphos▲380

  The AI-Native DevOps Workspace.

  Dev tools · 25d ago · nuphos.ai

• 
  Guideflow▲1,341

  The AI demo automation platform for SaaS

  AI · Nov 2025 · guideflow.com

• IB
  I built a synth for my daughter▲1,278

  Life & fun · Nov 2025 · bitsnpieces.dev

• 
  Welltory▲1,030

  Stop energy drain

  Work · Nov 2025 · welltory.com

• 
  Gemini 3▲1,007

  Bring any idea to life with multimodal capabilities

  AI · Nov 2025 · blog.google

• 
  TrustMRR▲836

  The database of verified startup revenues

  Growth · Nov 2025 · trustmrr.com

• B
  Boing▲782

  Life & fun · Nov 2025 · boing.greg.technology