What is the pricing for npm-scan?

npm-scan is a free Application Security tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/spaceraccoon/npm-scan/ for download and installation instructions.

What are alternatives to npm-scan?

Popular alternatives to npm-scan include: 1. AuditJS - AuditJS is a command-line tool that scans JavaScript projects for known vulnerabilities and outdated packages in npm dependencies using the OSS Index API or Nexus IQ Server. (Free) 2. NodeSecure - NodeSecure is a cybersecurity project that provides security monitoring and analysis capabilities specifically designed for Node.js applications. (Free) 3. npm-zoo - npm-zoo is a curated database of known malicious NPM packages that helps developers and security researchers identify and avoid potentially harmful dependencies in their projects. (Free) 4. Aikido Software Supply Chain Security - Software supply chain security platform detecting malware in dependencies (Commercial) 5. Chainguard Libraries - Malware-resistant software libraries rebuilt from source for multiple languages (Commercial) Compare these tools and more at https://cybersectools.com/categories/application-security

Who should use npm-scan?

npm-scan is for security teams and organizations that need NPM, Nodejs. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Application Security tools can be found at https://cybersectools.com/categories/application-security

npm-scan

An extensible, heuristic-based vulnerability scanning tool for installed npm packages.

Free50

Visit Website

Compare

Free50

npm-scan

An extensible, heuristic-based vulnerability scanning tool for installed npm packages.

Visit Website

Data verified Apr 2026

Explore Application Security 48 Alternatives Compare Stacks Market Map Explore All Tools

ADYour product here. Reach security decision-makers.Launch a campaign

npm-scan Description

Application Security/Software Composition Analysis

Npm Nodejs

An extensible, heuristic-based vulnerability scanning tool for installed npm packages. WARNING: npm-scan is still very much in early development and should not be used in production. We are developing more accurate heuristics. We are actively seeking new contributors with ideas for additional heuristics, so please do get in touch :) Another important project you can contribute to is npm-zoo, where past malicious packages are uploaded for research. We need more examples in order to develop better heuristics. Quickstart: npm install https://github.com/spaceraccoon/npm-scan.git npx npm-scan Usage: Usage: npx npm-scan [options] Options: -V, --version output the version number -p, --packages-dir <dir path> set directory path for packages. defaults to node_modules -e, --exclude-heuristics <items> exclude comma-separated list of heuristics -o, --output <file path> set file path for JSON output -v, --verbose print more details for each package scan -s, --strict include low-risk heuristics -h, --help output usage information Developing: git clone https://github.com/spaceraccoon/npm-scan.git npm link npm run scan npm run test npm run lint Push changes on a separate branch. To add a new

npm-scan Description

Application Security/Software Composition Analysis

Npm Nodejs

npm-scan FAQ

Common questions about npm-scan including features, pricing, alternatives, and user reviews.

npm-scan is An extensible, heuristic-based vulnerability scanning tool for installed npm packages. It is a Application Security solution designed to help security teams with NPM, Nodejs.

Have more questions? Browse our categories or search for specific tools.