|
Deptools
Software dependency management platform to scan, score, and manage every package in your codebase. Make smarter decisions with full visibility.
|
82 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
82 % |
|
TrueSpec - API spec drift guardrails
Keep your OpenAPI and code in sync. TrueSpec flags breaking changes before merge with clear CI reports.
|
81 % |
|
DevStackPulse
AI-powered changelog monitoring for your dev stack.
|
81 % |
|
CI Secure — Where Pipeline Meets Policy
Track npm package health through GitHub activity and CVE data before they enter your CI/CD pipeline
|
81 % |
|
CI/CD Security Scanning for Developers — SecOpsPipe
Scan every commit for leaked secrets, vulnerable dependencies, and insecure code — security checks built into your CI/CD pipeline, with results in every pull...
|
80 % |
|
Find compromised packages across every local project | Developer Defence
Local-first package-risk scanning with project-first findings, signed intelligence and practical remediation.
|
80 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
80 % |
|
pkgbin - package cache and traffic insights
pkgbin is a self-hosted package cache for npm, PyPI, and RubyGems with fast downloads and usage analytics.
|
79 % |
|
PkgRadar — Block malicious npm, PyPI & open-source packages in CI
Catch malicious npm, PyPI, RubyGems, Cargo, Maven, NuGet, Composer, Go, and Pub packages before they reach your build. Free to start — drop into GitHub Actio...
|
79 % |
|
DevOpsCheck — the audit that opens the pull request
Automated DevOps audit for GitHub and GitLab: secrets, known CVEs, GitHub Actions, Docker, Kubernetes and Terraform. Up to 58 checks, a 0–100 score, and fixe...
|
79 % |
|
Condux: catch every error, conduct every fix
Source-available error monitoring with an AI fix engine that opens draft pull requests your team reviews and merges. Managed cloud or self-host.
|
79 % |
|
RepoScope — See Inside Your Repositories
|
79 % |
|
mendapi — Self-maintaining APIs. Your code never leaves your machine.
mendapi detects upstream API breaking changes, scans your codebase locally, and drafts the fix as a reviewable diff. MCP server and agent skill built in. You...
|
79 % |
|
Runtrace | Vulnerability management for developer endpoints
Find vulnerable software installed on developer Macs, understand which devices are affected, and verify that updates removed the risk.
|
79 % |
|
Picketbridge — Know before your APIs break
Free API change monitoring for engineering teams. Get Slack alerts the moment Stripe, OpenAI, GitHub, or any of your third-party APIs changes.
|
79 % |
|
VersionAlert — Software updates, without the surprise
Track software releases across package registries, source hosts, containers, app stores, and more. Get dependable email and webhook alerts without monitoring...
|
78 % |
|
AnchorSpec — Specs your AI assistant actually follows.
A clean, telemetry-free fork of OpenSpec. Plan changes against durable specs, run them through your AI workflow, and ship — without the phone-home.
|
78 % |
|
DepTruE — Dependency Trust Engine
|
78 % |
|
ScanReq — Multi-Ecosystem Dependency Security Scanner
Real-time CVE detection and outdated package alerts for Python, Node.js, Rust, Go, PHP, Ruby and Java projects — directly inside VS Code. Zero config. Free.
|
78 % |
Detected social media networks