Alternatives and similar repositories for js-x-ray:

Users that are interested in js-x-ray are comparing it to the libraries listed below

• NodeSecure / scanner
  ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!
  ☆32Updated 3 weeks ago
• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆46Updated 2 years ago
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 2 years ago
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆393Updated 4 months ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated 2 years ago
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated 3 weeks ago
• spaceraccoon / npm-zoo
  A zoo for malicious NPM packages
  ☆20Updated 2 years ago
• davisjam / vuln-regex-detector
  Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
  ☆321Updated 3 years ago
• CodeIntelligenceTesting / jazzer.js
  Coverage-guided, in-process fuzzing for Node.js
  ☆298Updated 9 months ago
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆96Updated 4 years ago
• snyk / nodejs-runtime-agent
  Snyk Node Runtime Agent
  ☆16Updated 2 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆235Updated 4 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 2 years ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆46Updated last year
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆81Updated 8 months ago
• nice-registry / all-the-package-repos
  🌍 Normalized repository URLs for every package in the npm registry. Updated daily.
  ☆82Updated this week
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆56Updated 6 months ago
• LavaMoat / snow
  Use Snow to finally secure your web app's same origin realms!
  ☆108Updated this week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆112Updated 3 weeks ago
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆103Updated last year
• ajinabraham / libsast
  Generic SAST Library
  ☆130Updated 4 months ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆76Updated 2 years ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆82Updated last week
• os-scar / overlay
  Overlay is a browser extension helping developers evaluate open source packages before picking them
  ☆224Updated last year
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆44Updated 9 months ago
• gand3lf / semgrepper
  An extension to use Semgrep inside Burp Suite.
  ☆88Updated last year
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆293Updated this week