Open-Source Alternatives
Free Alternative to Snyk
8 free & open-source projects that replace Snyk.
Compare at a Glance
| vs Snyk |  trivy |  security-audit-skill |  SkillSpector |  codex-security |  deepsec |  defending-code-reference-harness |  AI-Infra-Guard |  bumblebee |
|---|---|---|---|---|---|---|---|---|
| Stars | 39k | 23k | 19k | 11k | 8.1k | 7.5k | 6.6k | 5.1k |
| Forks | 773 | 1.4k | 1.6k | 838 | 493 | 622 | 620 | 460 |
| Contributors | 30 | 3 | 30 | 30 | 11 | 4 | 30 | 4 |
| Last Commit | Jun 4, 2026 | Jun 18, 2026 | Jun 10, 2026 | Jul 29, 2026 | Jun 22, 2026 | Jun 2, 2026 | Aug 19, 2026 | Jun 2, 2026 |
| License | Apache-2.0 | MIT | Apache-2.0 | Apache-2.0 | Apache-2.0 | NOASSERTION | Apache-2.0 | Apache-2.0 |
| Language | Go | JavaScript | Python | TypeScript | TypeScript | Python | Python | Go |
Tired of costly subscriptions for software supply chain security tools like Snyk?
Discover bumblebee, the powerful open-source alternative for comprehensive developer endpoint scanning. It helps identify on-disk package, extension, and developer-tool metadata to protect against known software supply-chain compromises, giving you peace of mind.
- 📦 Package inventory scanning
- 🔍 Extension metadata discovery
- 🛠️ Developer tool analysis
- 🛡️ Supply chain compromise checks
- ✅ Read-only, secure analysis
bumblebee is completely free, open-source, and yours to use forever without any subscription fees.
Enhance your software supply chain security today! Get bumblebee on Fossy: https://fossy.dev/perplexityai/bumblebee
#OpenSource#SupplyChainSecurity#DevTools#Cybersecurity#FreeSoftware#GoLang#DeveloperSecurity
