HN Showcase
Back to browse
GitHub Repository

DepGuard is a visual analysis tool that turns messy `npm` vulnerability lists into clear, interactive graphs. It helps developers find the "blast radius" of a vulnerability and prioritize fixes based on network structure, not just CVSS scores.

1 starsTypeScript

DepGuard, Visualize and simulate NPM vulnerability blast radiuses

by DimitrissEgg1·Jun 28, 2026·1 point·0 comments
Visit ProjectView on HN

AI Analysis

●●SolidNiche GemBig Brain

Graph theory metrics prioritize vulnerabilities better than CVSS scores alone.

Strengths
  • •Betweenness centrality and reachability scores reveal structural risks CVSS ignores.
  • •Interactive Cytoscape.js visualization shows transitive dependency exposure paths clearly.
  • •SQLite-backed caching speeds up repeated analyses of the same dependency trees.
Weaknesses
  • •Snyk and Dependabot already scan npm vulnerabilities with enterprise integration.
  • •Only 1 GitHub star suggests limited real-world testing or adoption so far.
Category
Security
Target Audience

Security engineers and npm package maintainers

Similar To

Snyk · Dependabot · npm audit

Similar Projects

Open Source●●Solid

A Black Hole Simulator in CUDA C++

The repo actually implements an RK4 geodesic integrator in CUDA kernels to trace millions of rays and produce frame sequences — plus handy scripts to generate a Perlin accretion disk and preprocess NASA EXR star maps. It’s the sort of technical playground that shows real GPU know‑how and produces striking renders, but the experience is experimental: you must manually fetch assets, run preprocessing scripts, and there are no builds, benchmarks or accuracy notes to help anyone reproduce or compare results.

WizardryEye CandyNiche Gem
anwoy
204mo ago
Security●●Solid

OdinForge – Breach simulation that chains vulns into attack paths

The UI turns complex attack chains into an immediately scannable graph with per-path metrics (risk score, time-to-compromise, assets/credentials impacted) — great for threat modeling and tabletop drills. Feels more like a very polished BAS visualization than a novel research tool; what I want to know next is where the simulation inputs come from (real telemetry, vulnerability feeds, or canned scenarios).

SlickNiche Gem
Doc_Dre
214mo ago