Alternatives and similar repositories for package-manager-best-practices:

Users that are interested in package-manager-best-practices are comparing it to the libraries listed below

• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 2 years ago
• lirantal / eslint-plugin-anti-trojan-source
  ESLint plugin to detect and stop Trojan Source attacks
  ☆76Updated 2 years ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆119Updated last month
• google / tsec
  ☆132Updated this week
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆27Updated 9 months ago
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆40Updated 3 weeks ago
• NodeSecure / vulnera
  Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
  ☆30Updated last week
• ossf / scorecard-monitor
  Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
  ☆33Updated 3 weeks ago
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆126Updated last month
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆276Updated last month
• naugtur / can-i-ignore-scripts
  ☆58Updated last year
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆179Updated last year
• gigsboat / cli
  Do you have a boatload of speaking gigs? Use this CLI to manage them all!
  ☆35Updated 2 years ago
• sigstore / sigstore-js
  Code-signing for npm packages
  ☆161Updated this week
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆186Updated 2 weeks ago
• lirantal / anti-trojan-source
  Detect trojan source attacks that employ unicode bidi attacks to inject malicious code
  ☆47Updated 2 years ago
• sandworm-hq / sandworm-audit
  Security & License Compliance For Your App's Dependencies 🪱
  ☆471Updated 6 months ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆307Updated 9 months ago
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆50Updated 2 years ago
• CycloneDX / cyclonedx-node-npm
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
  ☆80Updated this week
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆235Updated 2 years ago
• OWASP / packman
  A documentation and tracking project with the goal of making package management systems more secure.
  ☆50Updated 4 years ago
• OWASP / www-project-application-security-verification-standard
  OWASP Foundation Web Respository
  ☆72Updated 2 months ago
• zaproxy / zap-api-nodejs
  ☆49Updated this week
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆275Updated 2 weeks ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆21Updated 2 months ago
• upgradejs / depngn
  A CLI tool to find out if your dependencies support a given version of node.
  ☆104Updated last year
• ossf / secure-sw-dev-fundamentals
  Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
  ☆191Updated last week
• paulirish / trace.cafe
  easy webperf trace sharing
  ☆123Updated this week