1.RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
+48 stars
from 4,149 · score 3.89
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
3 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.safedep / vet
Protect against malicious open source packages 🤖
+30 stars
from 1,093 · score 3.43
3.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
+6 stars
from 1,467 · score 1.95