Alternatives and similar repositories for js-x-ray:

Users that are interested in js-x-ray are comparing it to the libraries listed below

• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆46Updated 2 years ago
• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆32Updated 2 weeks ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated 2 years ago
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆296Updated last week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆114Updated this week
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆83Updated this week
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆398Updated 5 months ago
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆367Updated this week
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆326Updated 3 years ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆46Updated last year
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆96Updated 4 years ago
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 2 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated 5 months ago
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆81Updated 9 months ago
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆303Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated 2 weeks ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 3 years ago
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆50Updated 3 years ago
• elttam / semgrep-rules
  ☆189Updated 5 months ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆141Updated 2 years ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆168Updated 2 months ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆103Updated 2 months ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆43Updated 9 months ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆561Updated 3 weeks ago
• opengrep / opengrep-rules
  ☆61Updated 2 months ago
• SAP-archive / node-rasp
  An extended Node.js runtime with additional security mechanisms built-in. Protects your Node.js applications from injection attacks such …
  ☆31Updated 3 years ago