SkillRisk is a specialized security analysis tool designed for the AI Agent ecosystem, specifically focusing on Claude Code and Model Context Protocol (MCP) skills.
Cost / License
- Freemium
- Proprietary
ThailandPlatforms
- Online
+4
Dependabot Alternatives
Dependabot is described as 'Keep your dependencies on GitHub up to date without the automatic creation of the Pull Requests to update the dependency and checking for the known vulnerabilities' and is a vulnerability scanner in the development category. There are more than 10 alternatives to Dependabot for a variety of platforms, including Web-based, SaaS, Windows, Mac and Self-Hosted apps. The best Dependabot alternative is GitHub, which is free. Other great apps like Dependabot are Patchdex, Mend Renovate, Proscan AppSec and Snyk.
Alternatives list
Scans JavaScript and TypeScript lockfiles for vulnerabilities, distinguishes direct versus transitive issues, generates severity-grouped copy-and-run fix commands, offers HTML and CI-ready reports, supports offline use, and works without sending any data.
PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.
Cost / License
- Paid
- Proprietary (MIT)
Platforms
- Online
- Self-Hosted
- Software as a Service (SaaS)
- Bitbucket
- Wordpress
- GitHub
- GitLab
AuditDude checks your repositories for dependencies with known vulnerabilities and packages that have fallen behind. It's a simpler take on what Dependabot does.
Canada
United States
France
EU
