NPMScan

What it does

Ever opened GitHub on a Monday and found 47 Dependabot PRs waiting for you? 😅 Keeping npm dependencies secure and up to date across multiple repos feels impossible. Dependabot helps, but when every repo creates tens of PRs, the noise hides what actually matters. Therefore, I built npmscan, a dashboard that scans all your GitHub repos for package.json files, highlights vulnerable or outdated dependencies, and shows you what to fix first.

Monitor your GitHub repositories for vulnerable npm dependencies. Get real-time alerts, health scores, and automated scanning for outdated packages. Free tier available.

Experience automated security scanning, real-time alerts, and actionable insights for all your Node.js projects Link your repositories in seconds with secure OAuth. We only request read access to your package.json files. We analyze your npm dependencies daily for vulnerabilities using OSV.dev and calculate health scores for each repository. View actionable security insights, prioritize updates, and keep your dependencies healthy across all your projects. Secure OAuth integration - no tokens to manage. Simply select the repositories you want to monitor and we handle the rest. See all your repositories security status instantly. Our proprietary health score algorithm gives you a quick…from npmscan.io

• 
  4smart Packages Overview2021 · ▲75

  Monitor NuGet and NPM packages in your repositories

• 
  Dependabot – Automated Dependency Update PRs for Ruby, JS, Python and PHP2017 · dependabot.com · ▲51

  GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

• 
  Snyk for GitHub2016 · snyk.io · ▲143

  Fix vulnerabilities in Node & npm dependencies with a click.

• 
  Tips to stay safe from NPM supply chain attacks2025 · github.com · ▲96

  Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

• 
  RepoSecGo2025 · ▲88

  Know before you clone with instant GitHub security insights

• 
  Safe-NPM – only install packages that are +90 days oldNov 2025 · github.com · ▲90

  This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

• 
  /dev/null▲486

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Guideflow▲1,338

  Create interactive product demos and step-by-step guides in seconds with Guideflow, the leading AI-powered demo automation tool.

  AI · Nov 2025 · guideflow.com

• 
  I built a synth for my daughter▲1,278

  Hardware and software projects by Ali Roberts

  Life & fun · Nov 2025 · bitsnpieces.dev

• 
  Welltory▲1,028

  Measure your wellness. Use data to feel great every day.

  Work · Nov 2025 · welltory.com

• 
  Gemini 3▲1,016

  Bring any idea to life with multimodal capabilities

  AI · Nov 2025 · blog.google

• 
  TrustMRR▲833

  LLM Gateway is a b2b artificial intelligence based in United States, founded in 2025. $259,539/month in verified Stripe revenue. $78,764 MRR. Ahrefs Domain Rating 52/100. growing 55% month-over-month. Track LLM Gateway's verified metrics on TrustMRR.

  Growth · Nov 2025 · trustmrr.com

• 
  Boing▲782

  Life & fun · Nov 2025 · boing.greg.technology