Alternatives and similar repositories for js-x-ray

Users that are interested in js-x-ray are comparing it to the libraries listed below

• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆49Updated 3 months ago
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆416Updated 10 months ago
• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆35Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated last week
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆89Updated this week
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆210Updated 3 years ago
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 3 years ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆379Updated this week
• nice-registry / all-the-package-names
  🔤 A list of all the public package names on npm. Updated daily.
  ☆279Updated this week
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆302Updated last week
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆18Updated 2 years ago
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆336Updated 3 years ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated 2 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆129Updated last month
• os-scar / overlay
  Overlay is a browser extension helping developers evaluate open source packages before picking them
  ☆226Updated 3 months ago
• superhuman / rxxr2
  ☆145Updated 2 years ago
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• Checkmarx / chainjacking
  Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
  ☆59Updated 3 years ago
• evilsocket / jscythe
  Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.
  ☆331Updated last year
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• LavaMoat / snow
  Use Snow to finally secure your web app's same origin realms!
  ☆115Updated 6 months ago
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆164Updated 3 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆132Updated 3 months ago
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆61Updated 4 months ago
• moloch-- / reasonably-secure-electron
  A pattern for reasonably secure Electron applications
  ☆73Updated 2 years ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆156Updated last year
• WeWatchWall / fast-fuzz
  Test Case Generator Based on Branch Coverage and Fuzzing
  ☆36Updated last year
• avilum / portsscan
  A web client port-scanner written in GO, that supports the WASM/WASI interface for Browser WebAssembly runtime execution.
  ☆155Updated 2 years ago
• snyk / nodejs-runtime-agent
  Snyk Node Runtime Agent
  ☆16Updated 3 years ago
• JLLeitschuh / security-research
  Public disclosure channel for security vulnerabilities
  ☆18Updated 3 months ago