|
Supply-chain policy gate for npm, pnpm, yarn, and PyPI | InstallGuard
InstallGuard blocks risky dependencies before install across npm, pnpm, yarn, and PyPI. Catch typosquats, malicious install-time code, publisher churn, and t...
|
84 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
83 % |
|
Sigil — AI Agent Supply Chain Security Scanner
Sigil scans npm, PyPI, and MCP server packages for supply chain threats before they execute. Eight-phase static analysis with quarantine. Free CLI, MCP serve...
|
80 % |
|
wnpm — inline package vulnerability detector
wnpm is a cybersecurity tool: an inline package vulnerability detector for npm, pnpm and yarn. It checks every dependency against known vulnerability advisor...
|
80 % |
|
RepoShield — Pre-execution trust & malware detection for GitHub repos
Scan any GitHub repository for install-script risks, suspicious code patterns, dependency threats, and network indicators before you clone or install.
|
78 % |
|
Your analysts stop triaging Dependabot | pkgwarden
pkgwarden gate screens every package version for malware before your tools can resolve it, and opens one reviewable PR per lockfile to clear your vulnerabili...
|
78 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
78 % |
|
Scrutyn: Stop risky dependencies before they reach your machine
Supply-chain protection for npm and PyPI, for developers, CI and AI coding agents. New versions wait in the Lazaretto, every package is scanned, and installs...
|
78 % |
|
Check npm runtime compatibility
Inspect npm packages for potential compatibility issues across seven JavaScript runtimes, with file and dependency evidence.
|
78 % |
|
Python Compiler Online — CourseCamp
Write Python code and run it instantly in your browser. No installation, no signup required. Supports pip packages, Matplotlib, and Plotly. Free for everyone.
|
77 % |
|
pkgui.com
Check npm and PyPI package versions and create updated package.json and requirements.txt files.
|
77 % |
|
Securistry — Private approved npm registry for your team
Securistry is the private, approved npm supply for your team. Mirror, bake, review, install. Stop pulling unreviewed npm updates straight into production.
|
77 % |
|
Spyder — scientific Python IDE | Spyder.cc
Independent Spyder.cc guide to the Spyder IDE: install paths, stack comparisons, Variable Explorer and IPython panes, PyData workflows, and community links.
|
77 % |
|
pkgbin - package cache and traffic insights
pkgbin is a self-hosted package cache for npm, PyPI, and RubyGems with fast downloads and usage analytics.
|
77 % |
|
pkgscout — Check PyPI Package Name Availability
A modern CLI to check if Python package names are available on PyPI. Live API lookup with rich metadata, batch support, and JSON output.
|
77 % |
|
pantry - a fast, modern package manager
A fast, modern, universal package manager for your system. Install pre-built binaries for open source tools with a single command.
|
77 % |
|
PyK7VM - Python Obfuscator & Code Protection via Virtualization
Compile Python into hardened native artifacts that break standard decompilation workflows and raise the cost of source recovery.
|
77 % |
|
DepWarden — Free dependency & supply-chain scanner
Free, anonymous SCA: scan dependencies for CVEs (OSV, CISA KEV, EPSS), typosquats, risky licenses and end-of-life packages. No account, no source upload.
|
77 % |
|
Better npm | Inspect npm packages before you run them
Inspect npm packages for typosquats, risky install scripts, known vulnerabilities, and malware signals before they run. Free CLI; optional bring-your-own-key...
|
77 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
77 % |
Detected social media networks