Packj stops Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
☆694Sep 17, 2026Updated last month
Alternatives and similar repositories for packj
Users that are interested in packj are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GuardDog is a CLI tool to Identify malicious PyPI and npm packages☆1,238Updated this week
- Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages☆141Oct 5, 2022Updated 4 years ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆640Updated this week
- Open Source Package Analysis☆921Oct 21, 2026Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆892Aug 31, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- #supply #chain #attack #detection☆679Oct 23, 2026Updated last week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆629Feb 10, 2026Updated 8 months ago
- ☆17Jul 25, 2024Updated 2 years ago
- Windows Oracle Database Attack Toolkit☆79Jul 30, 2022Updated 4 years ago
- Collection of tools for analyzing open source packages.☆373Updated this week
- Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.☆243Mar 18, 2026Updated 7 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Dependency Combobulator☆96Jan 10, 2024Updated 2 years ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆151Jan 28, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,778Updated this week
- Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"☆47Jan 25, 2022Updated 4 years ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆145May 3, 2026Updated 5 months ago
- An open-source dataset of malicious software packages found in the wild.☆390Updated this week
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs☆450Oct 6, 2026Updated 3 weeks ago
- Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runti…☆58Dec 11, 2024Updated last year
- Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)☆45Jan 25, 2026Updated 9 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆614Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Classify Git commit diffs and messages with Jev. Bug fixes, security fixes/CWEs, and change types.☆38Sep 17, 2026Updated last month
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆174Jan 24, 2025Updated last year
- OpenSSF Scorecard - Security health metrics for Open Source☆5,799Updated this week
- ☆88Feb 11, 2022Updated 4 years ago
- Software signing just got easier☆21Dec 11, 2023Updated 2 years ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Apr 1, 2023Updated 3 years ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Mar 9, 2025Updated last year
- Gram is Klarna's own threat model diagramming tool☆337Updated this week
- ☆114Jun 8, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆17,360Updated this week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- A tool that allows downloading S3 directories as ZIP files☆34Apr 28, 2023Updated 3 years ago
- all paths lead to clouds☆640Oct 11, 2023Updated 3 years ago
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- Python source code auditing and static analysis on a large scale☆496Oct 3, 2023Updated 3 years ago
- This repository contains a list of papers about software supply chain☆29May 22, 2024Updated 2 years ago