Alternatives and similar repositories for js-x-ray:

Users that are interested in js-x-ray are comparing it to the libraries listed below

• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆46Updated 2 years ago
• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆31Updated this week
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆388Updated 3 months ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆367Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated 3 weeks ago
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆80Updated this week
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆46Updated last year
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆95Updated 4 years ago
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆320Updated 3 years ago
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆127Updated 3 months ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆44Updated 7 months ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated last year
• evilsocket / jscythe
  Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.
  ☆325Updated 5 months ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆139Updated 2 years ago
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 2 years ago
• LavaMoat / LavaDome
  Secure DOM trees isolation and encapsulation leveraging ShadowDOM
  ☆28Updated this week
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆153Updated 5 months ago
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆291Updated this week
• nice-registry / all-the-package-names
  🔤 A list of all the public package names on npm. Updated daily.
  ☆256Updated this week
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 2 years ago
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆57Updated this week
• elttam / semgrep-rules
  ☆180Updated 3 months ago
• tony-go / clix
  Write acceptance tests easily for your CLI program.
  ☆21Updated last year
• GitHubSecurityLab / gh-mrva
  Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)
  ☆56Updated 10 months ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆105Updated this week
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆101Updated 3 weeks ago