Sandworm

This product provides security and license compliance audits for JavaScript and PHP dependencies. It scans projects for vulnerabilities, malicious scripts, and license issues, generating detailed reports. It is designed for developers and IT teams in organizations of all sizes, from startups to enterprises. It is available as a free open-source command-line tool and as a cloud service for continuous monitoring.

Key features

• Scans for security vulnerabilities
• Detects malicious scripts
• License compliance checks
• Generates JSON and CSV reports
• Dependency tree and treemap visualizations
• Supports npm, Yarn, pnpm, Composer
• CI and Git Hook integration
• Monorepo and workspace support