Alternatives and similar repositories for js-x-ray

Users that are interested in js-x-ray are comparing it to the libraries listed below

• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆47Updated 2 years ago
• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆34Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated this week
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆375Updated this week
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆330Updated 3 years ago
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆401Updated 6 months ago
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆296Updated this week
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆141Updated 2 years ago
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆96Updated 4 years ago
• GitHubSecurityLab / gh-mrva
  Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)
  ☆59Updated last month
• GitHubSecurityLab / CodeQL-Community-Packs
  Collection of community-driven CodeQL query, library and extension packs
  ☆160Updated 2 weeks ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆206Updated 3 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated 6 months ago
• CodeIntelligenceTesting / jazzer.js
  Coverage-guided, in-process fuzzing for Node.js
  ☆305Updated this week
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆46Updated last year
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆88Updated this week
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆57Updated this week
• nice-registry / all-the-package-names
  🔤 A list of all the public package names on npm. Updated daily.
  ☆266Updated 3 weeks ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 4 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆120Updated this week
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆120Updated 3 months ago
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆86Updated 10 months ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆169Updated 4 months ago
• Escape-Technologies / awesome-graphql-security
  A curated list of awesome GraphQL Security frameworks, libraries, software and resources
  ☆335Updated last year
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 2 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆126Updated last month
• evilsocket / jscythe
  Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.
  ☆328Updated 8 months ago