Alternatives and similar repositories for package-manager-best-practices

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 3 years ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆77Updated 2 years ago
• google / tsec
  ☆132Updated 2 months ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆120Updated 4 months ago
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆288Updated last month
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆183Updated 3 weeks ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆86Updated this week
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆237Updated this week
• WICG / bundle-preloading
  Bundles of multiple resources, to improve loading JS and the Web.
  ☆106Updated last year
• google / safevalues
  ☆121Updated last week
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆284Updated this week
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆242Updated this week
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆40Updated 2 months ago
• sigstore / sigstore-js
  Code-signing for npm packages
  ☆162Updated this week
• google / strict-csp
  ☆46Updated 8 months ago
• step-security / wait-for-secrets
  Publish from GitHub Actions using multi-factor authentication
  ☆284Updated last week
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆28Updated 11 months ago
• ossf / scorecard-monitor
  Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
  ☆34Updated 3 months ago
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆182Updated last year
• os-scar / overlay
  Overlay is a browser extension helping developers evaluate open source packages before picking them
  ☆224Updated last year
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆67Updated 7 months ago
• step-security / github-actions-goat
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment
  ☆464Updated last month
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆127Updated 3 months ago
• theupdateframework / tuf-js
  JavaScript implementation of The Update Framework (TUF)
  ☆80Updated last week
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆18Updated 2 years ago
• WICG / sanitizer-api
  ☆241Updated last month
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆21Updated 4 months ago
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆50Updated 3 years ago
• WICG / uuid
  UUID V4
  ☆63Updated 2 years ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year