Alternatives and similar repositories for package-manager-best-practices

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• google / tsec
  ☆142Updated last month
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆79Updated 3 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆211Updated 3 years ago
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆52Updated 11 months ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆119Updated this week
• google / safevalues
  ☆144Updated last month
• nodejs / nodejs-dependency-vuln-assessments
  ☆21Updated 2 months ago
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆22Updated 7 months ago
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆19Updated 3 years ago
• sigstore / sigstore-js
  Code-signing for npm packages
  ☆178Updated last week
• tristan-f-r / npm-rank
  get popular npm packages
  ☆42Updated 10 months ago
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆31Updated last year
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆137Updated 2 weeks ago
• GoogleCloudPlatform / wombat-dressing-room
  proxy designed to reduce the attack surface of npm publish
  ☆121Updated this week
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆31Updated last week
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆303Updated 3 weeks ago
• google / strict-csp
  ☆48Updated 4 months ago
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆106Updated last year
• theupdateframework / tuf-js
  JavaScript implementation of The Update Framework (TUF)
  ☆82Updated this week
• gigsboat / cli
  Do you have a boatload of speaking gigs? Use this CLI to manage them all!
  ☆35Updated 3 years ago
• niksy / isomorphic-timers-promises
  `timers/promises` for client and server.
  ☆18Updated 4 years ago
• nodejs / node-core-test
  Node 18's node:test, as an npm package
  ☆98Updated last year
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆72Updated last year
• watson / ci-info
  Get details about the current Continuous Integration environment
  ☆361Updated 2 weeks ago
• lirantal / anti-trojan-source
  Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
  ☆58Updated 3 months ago
• lirantal / npm-security-best-practices
  Collection of npm package manager Security Best Practices
  ☆295Updated last week
• pkgjs / parseargs
  Polyfill of `util.parseArgs()`
  ☆125Updated 6 months ago
• WICG / bundle-preloading
  Bundles of multiple resources, to improve loading JS and the Web.
  ☆106Updated 2 years ago
• whatwg / urlpattern
  URL Pattern Standard
  ☆187Updated 2 months ago
• nodejs / tooling
  Advancing Node.js as a framework for writing great tools
  ☆172Updated last year