Trusty – Dependency Software Supply Chain Security

In plain words

Trusty is a search tool that helps developers assess the trustworthiness of open source packages by analyzing activity, provenance, and other characteristics. It uses statistical analysis across millions of packages to identify patterns commonly associated with malware. Built by creators of Kubernetes and Sigstore, Trusty is an early experimental preview designed to help teams understand which dependencies they're pulling into their software.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Trusty - Search for an open source package to understand its trustworthiness based on activity, provenance, and more. Brought to you by the founders of projects such as Kubernetes and Sigstore. Hey, Luke here the CTO of stacklok. This is an early experimental preview of Trusty. We use statistical analysis to observe…

• 
  TRUST – Coding Rust like it's 1989May 2026 · github.com · ▲178

  TRUST – Coding Rust like it's 1989. Contribute to wojtczyk/trust development by creating an account on GitHub.

• 
  4smart Packages Overview2021 · ▲75

  Monitor NuGet and NPM packages in your repositories

• 
  A curated list of insecure Python packages2016 · github.com · ▲94

  A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.

• 
  Trustroot2018 · trustroot.io · ▲85

  Fraud and theft protection for cryptocurrency

• 
  npm install actual-malware2022 · github.com · ▲55

  Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

• PD
  PickBetterPack – Discover similar pkgs from package.json dependencies2021 · pickbetterpack.com · ▲22

• 
  /dev/null▲472

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Flowla▲1,119

  Digital sales rooms that wow buyers

  Growth · 2023 · flowla.com

• 
  Passionfroot Discovery▲962

  Discover & book top creators to promote your product

  Growth · 2023 · passionfroot.me

• 
  Re:catch▲939

  If Google Form & Calendly had a baby

  Growth · 2023 · recatch.cc

• 
  Pitch 2.0▲886

  Create, share and analyze presentations faster than ever

  Work · 2023 · pitch.com

• 
  LeadDelta 3.0▲883

  CRM built for modern teams & creators powered by AI

  AI · 2023 · leaddelta.com

• 
  SpeedVitals▲829

  Hi HN, I’m Kashish, one of the co-founders of SpeedVitals, a platform for testing & monitoring website performance with a major emphasis on Core Web Vitals. Until now, our platform has only focused on Synthetic/Lab testing, such as Lighthouse tests and TTFB tests. But now, we have developed a Real-User Monitoring platform that doubles up as a Web Analytics tool. One major feature we have that most RUM tools lack is Performance Audits. Just like Lighthouse audits work on Lab test data, our audits work across all the real-user visits and gives suggestions on what task to prioritize first.…

  Dev tools · 2023 · speedvitals.com