ochrona-cli VS pip-rating

Compare ochrona-cli vs pip-rating and see what are their differences.

ochrona-cli

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs (by ochronasec)

pip-rating

Check the health of your project's requirements and get a score for each dependency. (by Nekmo)
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
ochrona-cli pip-rating
2 1
52 28
- -
0.6 9.0
about 1 year ago 6 months ago
Python Python
MIT License MIT License
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

ochrona-cli

Posts with mentions or reviews of ochrona-cli. We have used some of these posts to build our list of alternatives and similar projects.

pip-rating

Posts with mentions or reviews of pip-rating. We have used some of these posts to build our list of alternatives and similar projects.

What are some alternatives?

When comparing ochrona-cli and pip-rating you can also consider the following projects:

pip-audit - Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

creosote - Identify unused dependencies and avoid a bloated virtual environment.

safety - Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

wphash-vuln-data - WordPress vulnerability data

ggshield - Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

pygrype - A python wrapper for Anchore Grype

best-of-python-dev - ๐Ÿ† A ranked list of awesome python developer tools and libraries. Updated weekly.

in-toto - in-toto is a framework to protect supply chain integrity.

dephell - :package: :fire: Python project management. Manage packages: convert between formats, lock, install, resolve, isolate, test, build graph, show outdated, audit. Manage venvs, build package, bump version.

anchore-engine - A service that analyzes docker images and scans for vulnerabilities

ThreatPlaybook - A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

repometascore - repometascore (aka repository metadata scoring) analyzes metadata of the given repository, collects info about its contributors, and outputs the risk level.