Alternatives and similar repositories for package-manager-best-practices

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• google / tsec
  ☆133Updated this week
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆238Updated 2 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆208Updated 3 years ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆77Updated 2 years ago
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆22Updated this week
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆28Updated last year
• google / safevalues
  ☆124Updated last week
• lirantal / learning-http-security-headers-book
  Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
  ☆18Updated 2 years ago
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆43Updated 4 months ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆93Updated this week
• GoogleCloudPlatform / wombat-dressing-room
  proxy designed to reduce the attack surface of npm publish
  ☆118Updated 2 months ago
• WICG / sanitizer-api
  ☆243Updated last week
• google / strict-csp
  ☆46Updated 10 months ago
• sigstore / sigstore-js
  Code-signing for npm packages
  ☆165Updated last week
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆129Updated last month
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆122Updated 6 months ago
• gigsboat / cli
  Do you have a boatload of speaking gigs? Use this CLI to manage them all!
  ☆35Updated 2 years ago
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆253Updated last week
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆104Updated last year
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated last week
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆291Updated last week
• zaproxy / zap-api-nodejs
  ☆51Updated 3 weeks ago
• WICG / bundle-preloading
  Bundles of multiple resources, to improve loading JS and the Web.
  ☆106Updated last year
• lirantal / anti-trojan-source
  Detect trojan source attacks that employ unicode bidi attacks to inject malicious code
  ☆47Updated 2 years ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆47Updated last year
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 4 years ago
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆374Updated this week
• Open-Source-Security-Coalition / Open-Source-Security-Coalition
  ☆40Updated 5 years ago
• OWASP / cwe-sdk-javascript
  A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
  ☆32Updated 6 months ago
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆318Updated last month