Alternatives and similar repositories for package-manager-best-practices

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• google / tsec
  ☆139Updated last week
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆210Updated 3 years ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆77Updated 2 years ago
• google / strict-csp
  ☆46Updated 11 months ago
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆29Updated last year
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆22Updated last month
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆43Updated 6 months ago
• lirantal / anti-trojan-source
  Detect trojan source attacks that employ unicode bidi attacks to inject malicious code
  ☆47Updated 2 years ago
• google / safevalues
  ☆134Updated 2 weeks ago
• GoogleCloudPlatform / wombat-dressing-room
  proxy designed to reduce the attack surface of npm publish
  ☆119Updated last month
• sigstore / sigstore-js
  Code-signing for npm packages
  ☆167Updated this week
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆295Updated 2 weeks ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆95Updated this week
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆131Updated last week
• theupdateframework / tuf-js
  JavaScript implementation of The Update Framework (TUF)
  ☆80Updated last week
• WICG / bundle-preloading
  Bundles of multiple resources, to improve loading JS and the Web.
  ☆107Updated last year
• nodejs / node-core-test
  Node 18's node:test, as an npm package
  ☆98Updated 8 months ago
• lirantal / lockfile-lint
  Lint an npm or yarn lockfile to analyze and detect security issues
  ☆812Updated 4 months ago
• morficus / license-ls
  Get a list of licenses used by a projects dependencies
  ☆19Updated 2 years ago
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆322Updated last month
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆18Updated 2 years ago
• WinterTC55 / proposal-package-json
  A proposal specifying package.json
  ☆23Updated 2 years ago
• google / js-green-licenses
  JavaScript package.json License Checker
  ☆181Updated last year
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆104Updated last year
• WICG / uuid
  UUID V4
  ☆63Updated 2 years ago
• pkgjs / parseargs
  Polyfill of `util.parseArgs()`
  ☆124Updated last month
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆69Updated 11 months ago
• mysticatea / eslint-plugin-es
  ESLint plugin about ECMAScript syntactic features.
  ☆110Updated 3 years ago
• upgradejs / depngn
  A CLI tool to find out if your dependencies support a given version of node.
  ☆104Updated 2 years ago
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆51Updated 3 years ago