NPMScan Alternatives

NPMScan is described as 'Security analysis tool for the JavaScript ecosystem. It scans npm packages for malicious behavior and supply chain risks that are often invisible to developers. The scanner inspects scripts, dependencies, encoded payloads, metadata, and common attack patterns used' and is an website in the security & privacy category. There are more than 25 alternatives to NPMScan, not only websites but also apps for a variety of platforms, including SaaS, Mac, Windows and Self-Hosted apps. The best NPMScan alternative is GitHub, which is free. Other great sites and apps similar to NPMScan are Artemis Security Scanner, Mend Renovate, Aikido Security and Libraries.io.

Copy a direct link to this comment to your clipboard
Alternatives
Get a badge for your siteNPMScan alternatives page was last updated

Alternatives list

  1. SecDash icon
     Like

    SecDash automatically detects security vulnerabilities in applications created with ChatGPT, Claude, and other AI tools, providing clear and actionable guidance.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    Good alternative?
     
  2. Vigiles icon
     1 like

    Timesys Vigiles is a Software Composition Analysis (SCA) tool that helps generate and analyze a Software Bill of Materials (SBOM) for publicly known cybersecurity vulnerabilities, particularly CVEs. Vigiles is optimized for embedded systems, and it provides a complete...

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    • Software as a Service (SaaS)
    Good alternative?
     
  3. Violinist.io icon
     1 like

    Automatically update your composer (php) dependencies.

    Cost / License

    • Freemium
    • Open Source

    Application type

    Platforms

    • Online
    • PHP
    Good alternative?
     
  4. Dependency Track SaaS provided by YourSky.blue is the managed cloud solution of the popular open-source Dependency-Track. Always up to date with the latest security bulletins, it allows to easily monitor all the chain of software components through powerful dashboards and...

    Cost / License

    • Paid
    • Open Source

    Application type

    Platforms

    • Online
    • Software as a Service (SaaS)
    Good alternative?
     
  5. A single pane of glass for understanding and mitigating risks across your entire codebase and supply chain.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Software as a Service (SaaS)
    Good alternative?
     
  6. vet icon
     Like

    vet is a tool for protecting against open source software supply chain attacks. To adapt to organizational needs, it uses an opinionated policy expressed as Common Expressions Language and extensive package security metadata including:

    Cost / License

    Platforms

    • Mac
    • Linux
    • Homebrew
    Good alternative?
     
You are at page 3 of NPMScan alternatives