How many alternatives to npm-zoo are available?

There are 48 alternatives to npm-zoo listed on CybersecTools, all within the Software Supply Chain Security category. Each alternative is matched based on shared capabilities, tags, and NIST CSF coverage areas.

Is npm-zoo free or commercial?

npm-zoo is a free Software Supply Chain Security tool. You can use it at no cost. Both free and commercial alternatives are available for comparison.

What type of tool is npm-zoo?

npm-zoo is a Software Supply Chain Security tool within the broader Application Security category. It is used by security professionals for software supply chain security capabilities and can be compared against 48 similar tools.

48 Best npm-zoo Alternatives & Competitors (2026)

Top npm-zoo Alternatives and Competitors at a Glance

A closer look at the 8 most relevant alternatives and competitors to npm-zoo, including their key features and shared capabilities.

Aikido Software Supply Chain Security

Commercial

Software Supply Chain Security

Software supply chain security platform detecting malware in dependencies

Key features: Real-time malware detection in dependencies, IDE plugin for blocking malicious packages during development, Safe Chain package manager hooks for npm, yarn, and pnpm, Proprietary threat intelligence feed, Automated pull request generation for vulnerability fixes

Shares 3 capabilities with npm-zoo: NPM, Supply Chain Security, Package Security

View Aikido Software Supply Chain Security|Aikido Software Supply Chain Security alternatives|Compare Aikido Software Supply Chain Security

Chainguard Libraries

Commercial

Software Supply Chain Security

Malware-resistant software libraries rebuilt from source for multiple languages

Key features: SLSA Level 2 build infrastructure for library compilation, Malware-resistant registry distribution, Critical and high CVE patching for Python libraries, Support for JavaScript, Java JARs, and Python Wheels, Full provenance tracking for all libraries

Shares 3 capabilities with npm-zoo: NPM, Supply Chain Security, Package Security

View Chainguard Libraries|Chainguard Libraries alternatives|Compare Chainguard Libraries

Socket

Commercial

Software Supply Chain Security

Detects and blocks malicious/vulnerable open source packages in supply chains.

Key features: Real-time detection and blocking of malicious npm and PyPI packages, Behavioral analysis of package code for data exfiltration, RCE, and backdoor patterns, Security alerts with detailed threat descriptions and actionable remediation advice, Open source package search and security health evaluation, Protection during live package window before registry removal

Shares 3 capabilities with npm-zoo: NPM, Supply Chain Security, Package Security

View Socket|Socket alternatives|Compare Socket

Hunted Labs

Commercial

Software Supply Chain Security

Detects foreign adversarial influence in open source software dependencies.

Key features: Deep repository and dependency intelligence analysis, Identification of foreign adversarial maintainers and package governance, Software supply chain risk assessment, Safer package alternative recommendations, IDE extension for real-time dependency risk visibility (VS Code, Cursor, Windsurf)

Shares 3 capabilities with npm-zoo: Security Research, Supply Chain Security, Package Security

View Hunted Labs|Hunted Labs alternatives|Compare Hunted Labs

Corridor Shai Hulud 2.0 Detector

Free

Software Supply Chain Security

Client-side tool to check npm projects for Shai Hulud 2.0 supply chain compromise.

Key features: Upload and scan package-lock.json or package.json files for affected npm packages, Checks project dependencies against a list of known Shai Hulud 2.0 compromised packages, Fully client-side analysis with no data uploaded or stored server-side

Shares 3 capabilities with npm-zoo: NPM, Supply Chain Security, Package Security

View Corridor Shai Hulud 2.0 Detector|Corridor Shai Hulud 2.0 Detector alternatives|Compare Corridor Shai Hulud 2.0 Detector

pkgsign

Free

Software Supply Chain Security

A CLI tool for signing and verifying npm and yarn packages.

Shares 3 capabilities with npm-zoo: NPM, Supply Chain Security, Package Security

View pkgsign|pkgsign alternatives|Compare pkgsign

Veracode Secure Your Software Supply Chain

Commercial

Software Supply Chain Security

Software supply chain security platform with SCA, package firewall & threat intel

Key features: Software Composition Analysis for dependency vulnerability detection, Complete dependency tree mapping for direct and transitive dependencies, AI-powered vulnerability prioritization and remediation guidance, Package Firewall to block malicious packages before pipeline entry, Monitoring of npm and PyPI package registries

View Veracode Secure Your Software Supply Chain|Veracode Secure Your Software Supply Chain alternatives|Compare Veracode Secure Your Software Supply Chain

Cloudsmith

Commercial

Software Supply Chain Security

Cloud-native artifact mgmt & software supply chain security platform.

Key features: Vulnerability and malware scanning for packages, Policy management using OPA Rego syntax, Package quarantine and promotion workflows, Universal artifact repository supporting 30+ formats, OCI-compliant container registry

View Cloudsmith|Cloudsmith alternatives|Compare Cloudsmith

The most popular alternatives to npm-zoo include Aikido Software Supply Chain Security, Chainguard Libraries, Socket, Hunted Labs, and Corridor Shai Hulud 2.0 Detector. These Software Supply Chain Security tools offer similar capabilities and are frequently compared by security professionals evaluating their options.

Best npm-zoo Alternatives & Competitors in 2026

npm-zoo Alternatives and Competitors

Top npm-zoo Alternatives and Competitors at a Glance

All 48 Alternatives & Competitors to npm-zoo

Also compare alternatives to:

Compare npm-zoo with:

npm-zoo Alternatives FAQ

FEATURED

Sponsored

TRENDING CATEGORIES

POPULAR

FEATURED

Sponsored

TRENDING CATEGORIES

POPULAR