Skip to content
#

dependabot-alternative

Star

Here are 6 public repositories matching this topic...

Language: All
Filter by language
All 6 JavaScript 4 Python 1 TypeScript 1

0xSteph / patient-zero

Sponsor
Star 14

Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.

javascript cli npm security mcp pypi sarif precommit-hook supply-chain-security agent-security ioc-scanner shai-hulud dependabot-alternative install-blocking
  • Updated Sep 6, 2026
  • JavaScript

AjayBThorat-20 / devcompass

Star 2

CLI dependency health checker for Node.js/npm: CVE scanning (OSV + NVD), license conflicts, unused deps, safe auto-fix with rollback, and optional AI-powered recommendations. Free complement to npm audit & Dependabot.

nodejs javascript developer-tools nvd osv typosquatting sca cvss cli-tool vulnerability-scanner dependency-management license-compliance supply-chain-security license-checker ai-powered cve-scanner ollama package-audit dependabot-alternative npm-audit-alternative
  • Updated Sep 4, 2026
  • JavaScript

Add this topic to your repo

To associate your repository with the dependabot-alternative topic, visit your repo's landing page and select "manage topics."

Learn more