Sandworm Cloud Edition
Keep your JavaScript code secure and compliant with Sandworm
Sandworm Cloud Edition launched on July 27, 2023 with 326 votes, #83 of 4,347 launches that month and more than 95% of that year's launches. The site was still online in September 2026, 3 years on.
In plain words
Sandworm Cloud Edition is a security and compliance tool for JavaScript projects that scans code and dependencies for vulnerabilities and license issues. Designed for developers, it generates visualizations and CSV reports to help teams understand their project's security posture and licensing obligations. The tool addresses legal compliance alongside security concerns in a single platform.
written from the facts on this page · September 2026
From the sources
Sandworm offers a powerful cloud environment to help keep your JavaScript code secure and compliant. It scans your project and dependencies for vulnerabilities, license issues, and more and generates visualisations and a CSV report about licenses.
Beautiful security & license compliance reports for your app’s dependencies. Scans your project and dependencies for security vulnerabilities, license & metadata issues - here's the list of issue types . It’s free and open source , and works with npm, Yarn, pnpm, and Composer. Run npx @sandworm/audit@latest in the terminal or in your CI / Git Hook workflows. Outputs JSON issue and license usage reports, direct and transient dependency data as CSV, as well as easy to read dependency tree and treemap visualizations. Sandworm Cloud monitors your GitHub activity and generates fresh audit reports for every change you make. View and share reports with collaborators. Get recommendations and…from sandworm.dev
Does a similar job
all alternatives →
Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies2022 · github.com · ▲10Keep your JavaScript code secure and compliant with Sandworm - Sandworm
Execute JavaScript in a WebAssembly QuickJS sandbox2024 · github.com · ▲206This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…
Sandpack by CodeSandbox2021 · sandpack.codesandbox.io · ▲211Toolkit for building live coding experiences in browser
I've been making JavaScript sandbox alone for 6 years2022 · playcode.io · ▲397Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.
- SJSandbox.js - Run user code in a sandboxed environment2012 · engineering.versal.com · ▲31
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, July 2023
the whole month →
Hey everyone, I here is a small open-source project I've been working on lately. I'd love to hear your thoughts and improvement ideas :) GitHub: [github.com/Vincenius/workout-lol](https://github.com/Vincenius/workout-lol)
Dev tools · 2023 · workout.lol
- HN
I saw this [0] pretty cool thread by user revskill, and wanted a quicker way to search through it, but also to keep them all in one place so I can read them at my leisure whenever I get time. Right now is like 60 lines of Ruby using Nokogiri, but I will certainly look into it further down the line and improve the list. There's a cronjob checking the thread every 12 hours but I will eventually shut that down and it will become static after that. There are some really awesome blogs in there. I really recommend going through the list, it made my day. [0] "Could you share your personal blog…
Life & fun · 2023 · dm.hn
Anytype is built on the open-source AnySync protocol: a local-first protocol based on CRDTs. Users of Anytype can create spaces - graph-based databases with modular UI. Each space has unique access rights. Today, Anytype's beta is in single-player mode. Multiplayer mode, which will support local-first collaboration between multiple users, will be launched in the first half of 2024. Anytype fulfils the seven ideals of local first software from here - https://www.inkandswitch.com/local-first/ , our team felt these things are important to all of us: • No spinners: your work…
Commerce · 2023 · anytype.io
