Sandworm

In plain words

Sandworm is a security and compliance auditing tool for JavaScript projects that scans code and dependencies for vulnerabilities and license issues. It works with any JavaScript package manager and produces visualizations and CSV reports detailing license information. The tool is designed for developers who need to secure their applications and ensure their dependencies meet compliance requirements.

written from the facts on this page · September 2026

From the sources

Sandworm audits your project and dependencies for vulnerabilities, license issues, and more. Works with any JS package manager, generates visualizations and a CSV report about license info. Secure and ensure compliance for your app's dependencies.

Beautiful security & license compliance reports for your app’s dependencies. Scans your project and dependencies for security vulnerabilities, license & metadata issues - here's the list of issue types . It’s free and open source , and works with npm, Yarn, pnpm, and Composer. Run npx @sandworm/audit@latest in the terminal or in your CI / Git Hook workflows. Outputs JSON issue and license usage reports, direct and transient dependency data as CSV, as well as easy to read dependency tree and treemap visualizations. Sandworm Cloud monitors your GitHub activity and generates fresh audit reports for every change you make. View and share reports with collaborators. Get recommendations and…from sandworm.dev

• 
  Sandworm Cloud Edition2023 · sandworm.dev · ▲326

  Keep your JavaScript code secure and compliant with Sandworm

• 
  Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies2022 · github.com · ▲10

  Keep your JavaScript code secure and compliant with Sandworm - Sandworm

• 
  Execute JavaScript in a WebAssembly QuickJS sandbox2024 · github.com · ▲206

  This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…

• 
  Sandpack by CodeSandbox2021 · sandpack.codesandbox.io · ▲211

  Toolkit for building live coding experiences in browser

• 
  How to ensure JavaScript code quality2017 · deepscan.io · ▲83

  DeepScan is a cutting-edge static analysis tool for JavaScript. You can inspect all of your JavaScript code comprehensively.

• SJ
  Sandbox.js - Run user code in a sandboxed environment2012 · engineering.versal.com · ▲31

• 
  /dev/null▲472

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Bento▲1,372

  A link in bio, but rich and beautiful

  Dev tools · 2023 · linktr.ee

• 
  Jitter 1.0▲1,020

  A fast and simple animation tool on the web 💫

  Work · 2023 · jitter.video

• 
  Twinr 2.0▲962

  Convert any website to mobile apps in minutes

  Dev tools · 2023 · twinr.dev

• 
  Decktopus AI▲868

  Your on-demand presentation generator

  AI · 2023 · decktopus.com

• 
  Aaply▲812

  Make your mobile app happen

  Dev tools · 2023 · aaply.app

• 
  Scalenut▲783

  AI that powers your entire content lifecycle

  AI · 2023 · scalenut.com