nowfound

Dev tools · March 31, 2023

SafeDep Vet

Identify open source risks

What it does

SafeDep vet is a tool for identifying risks in open source software supply chain. It helps engineering and security teams to identify potential issues in their open source dependencies and evaluate them against organizational policies.

Does a similar job

all alternatives →
  • VA
  • IB
    I built a tool for policy driven vetting of open source packages2023 · github.com · ▲7

    Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)

  • Opengrep2025 · ▲340

    The open source code security engine

  • gpt-oss-safeguardOct 2025 · openai.com · ▲119

    Open safety reasoning models with custom safety policies

  • MS
    MCP-Shield – Detect security issues in MCP servers2025 · github.com · ▲134

    I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…

  • vet2025 · getvet.sh · ▲1

    The safety net for curl | bash

More dev tools this month

the category →
  • Dograh592

    The open source VAPI alternative

    Dev tools · 27d ago · dograh.com

  • Meridian530

    Don't let your work go unnoticed. Get promoted!

    Dev tools · 22d ago · meridiona.com

  • x1516

    Lovable for iPhone apps go from idea to App Store

    Dev tools · 13d ago · x1.new

  • OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

    Dev tools · 4d ago · opentrailpaper.com

  • Nuphos380

    The AI-Native DevOps Workspace.

    Dev tools · 26d ago · nuphos.ai

  • Track your AI visibility for free (using your own API keys!)

    Dev tools · 27d ago · lettertrace.com

Source: Product Hunt launch

Launched alongside, March 2023

the whole month →
  • GPT-41,161

    LLM that exhibits human-level performance

    AI · 2023 · openai.com

  • Collato972

    One AI search to find anything instantly, across all apps

    AI · 2023

  • A better UI for ChatGPT

    AI · 2023 · typingmind.com

  • Meet the internet again

    Work · 2023 · apps.apple.com

  • Sequoia726

    Anonymous sexual health app for men

    Life & fun · 2023 · sequoia.health

  • BI

    I'm a big fan of the BBC podcast In Our Time -- and (like most people) I've been playing with the OpenAI APIs. In Our Time has almost 1,000 episodes on everything from Cleopatra to the evolution of teeth to plasma physics, all still available, so it's my starting point to learn about most topics. But it's not well organised. So here are the episodes sorted by library code. It's fun to explore. Web scraping is usually pretty tedious, but I found that I could send the minimised HTML to GPT-3 and get (almost) perfect JSON back: the prompt includes the Typescript definition. At the same time I…

    AI · 2023 · genmon.github.io