Alternatives and similar repositories for js-x-ray

Users that are interested in js-x-ray are comparing it to the libraries listed below

• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆46Updated 2 years ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆372Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated this week
• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆32Updated this week
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆296Updated last week
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆399Updated 6 months ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated 2 years ago
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆327Updated 3 years ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆42Updated 10 months ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆141Updated 2 years ago
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆96Updated 4 years ago
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆85Updated this week
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 2 years ago
• y-mehta / ssrf-req-filter
  Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses
  ☆22Updated 3 months ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 3 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆114Updated last week
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆103Updated last year
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• WeWatchWall / fast-fuzz
  Test Case Generator Based on Branch Coverage and Fuzzing
  ☆36Updated last year
• LavaMoat / snow
  Use Snow to finally secure your web app's same origin realms!
  ☆112Updated last month
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆56Updated 8 months ago
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated 6 months ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆77Updated 2 years ago
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆155Updated 8 months ago
• trickest / find-gh-poc
  Find CVE PoCs on GitHub
  ☆147Updated last year
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• tristan-f-r / npm-rank
  get popular npm packages
  ☆38Updated last month