Alternatives and similar repositories for package-manager-best-practices:

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• google / tsec
  ☆132Updated 2 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 2 years ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆76Updated 2 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆233Updated 2 months ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆78Updated this week
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆125Updated last week
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆119Updated 2 weeks ago
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆230Updated 3 weeks ago
• webschik / tslint-config-security
  TSLint security rules
  ☆70Updated 4 years ago
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆269Updated this week
• GoogleCloudPlatform / wombat-dressing-room
  proxy designed to reduce the attack surface of npm publish
  ☆114Updated last month
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆39Updated 3 weeks ago
• sandworm-hq / sandworm-guard-js
  Easy auditing & sandboxing for your JavaScript dependencies 🪱
  ☆253Updated last year
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆67Updated 4 months ago
• gigsboat / cli
  Do you have a boatload of speaking gigs? Use this CLI to manage them all!
  ☆35Updated 2 years ago
• pkgjs / parseargs
  Polyfill of `util.parseArgs()`
  ☆123Updated last month
• google / safevalues
  ☆111Updated last week
• wooorm / npm-esm-vs-cjs
  Data on the share of ESM vs CJS on the public npm registry
  ☆165Updated 2 months ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆18Updated 2 years ago
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆27Updated 8 months ago
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆177Updated 4 months ago
• lirantal / lockfile-lint
  Lint an npm or yarn lockfile to analyze and detect security issues
  ☆793Updated 4 months ago
• eslint / json
  JSON language plugin for ESLint
  ☆58Updated this week
• WICG / bundle-preloading
  Bundles of multiple resources, to improve loading JS and the Web.
  ☆106Updated last year
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆50Updated 2 years ago
• tclindner / npm-package-json-lint
  Configurable linter for package.json files
  ☆231Updated this week
• eslint / css
  CSS language plugin for ESLint
  ☆157Updated this week
• nodejs / node-core-test
  Node 18's node:test, as an npm package
  ☆95Updated last month
• google / strict-csp
  ☆44Updated 4 months ago