1.RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
+7 stars
from 4,190 · score 2.08
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
3 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.safedep / vet
Protect against malicious open source packages 🤖
+5 stars
from 1,118 · score 1.79
3.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
+1 stars
from 1,472 · score 0.69