Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost
Busbar
Busbar
AxiomCode
AxiomCode

projectdiscovery/depx

Malicious package & supply-chain intelligence

Visit GitHub
Go
199
20
2 contributors
MIT License
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

Busbar

Control what AI can do before it acts

AxiomCode

Give Al Agents a Deeper Understanding of Your Codebase with a Code Graph

Momentum

How fast projectdiscovery/depx is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 22 – Oct 19, 2026

Stars +14 in 59 days

012
2

Forks +2 in 59 days

01
1

Merged PRs 3 in 59 days

012
2

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Aug 22Aug 30Sep 7Sep 15Sep 23Oct 1Oct 9Oct 17
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Sat, Aug 22, 2026+2+10
Sun, Aug 23, 2026+1+10
Mon, Aug 24, 2026+1+00
Tue, Aug 25, 2026+0+00
Wed, Aug 26, 2026+1+00
Thu, Aug 27, 2026+1+02
Fri, Aug 28, 2026+0+00
Sat, Aug 29, 2026+0+00
Sun, Aug 30, 2026+2+00
Mon, Aug 31, 2026+0+00
Tue, Sep 1, 2026+0+00
Wed, Sep 2, 2026+0+00
Thu, Sep 3, 2026+0+00
Fri, Sep 4, 2026+0+00
Sat, Sep 5, 2026+0+00
Sun, Sep 6, 2026+0+00
Mon, Sep 7, 2026+0+00
Tue, Sep 8, 2026+1+00
Wed, Sep 9, 2026+0+00
Thu, Sep 10, 2026+0+00
Fri, Sep 11, 2026+0+00
Sat, Sep 12, 2026+0+00
Sun, Sep 13, 2026+0+00
Mon, Sep 14, 2026+0+00
Tue, Sep 15, 2026+0+00
Wed, Sep 16, 2026+0+00
Thu, Sep 17, 2026+0+00
Fri, Sep 18, 2026+0+00
Sat, Sep 19, 2026+0+00
Sun, Sep 20, 2026+0+00
Mon, Sep 21, 2026+0+00
Tue, Sep 22, 2026+0+00
Wed, Sep 23, 2026+1+00
Thu, Sep 24, 2026+0+00
Fri, Sep 25, 2026+1+00
Sat, Sep 26, 2026+0+00
Sun, Sep 27, 2026+0+00
Mon, Sep 28, 2026+0+00
Tue, Sep 29, 2026+0+00
Wed, Sep 30, 2026+0+00
Thu, Oct 1, 2026+2+00
Fri, Oct 2, 2026+0+00
Sat, Oct 3, 2026+0+00
Sun, Oct 4, 2026+0+00
Mon, Oct 5, 2026+1+00
Tue, Oct 6, 2026+0+00
Wed, Oct 7, 2026+0+00
Thu, Oct 8, 2026+0+00
Fri, Oct 9, 2026+0+00
Sat, Oct 10, 2026+0+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+0+01
Tue, Oct 13, 2026+0+00
Wed, Oct 14, 2026+0+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+0+00
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+0+00
Total+14+23
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Mentions and achievements

Where people are talking about projectdiscovery/depx, and every badge it has earned
  1. Jul 271 post

    • Pipe your dependency list into depx before you run install. One shortlist, one command, a verdict on every package across npm, PyPI, Go, Cargo, and RubyGems in a single pass.

      Read full on X, posted by @pdiscoveryio

      @pdiscoveryio · x.com

  2. Jul 231 post

    • Check out our latest tool, depx! Seven days of malicious packages, pulled straight from OpenSSF's database and a live feed refreshed hourly. One command replaces manual advisory tracking. You see a…

      Read full on X, posted by @pdiscoveryio

      @pdiscoveryio · x.com

  3. 1 month earlier
  4. Jun 122 posts

    • [NEW-RELEASE] Every time an npm package gets hijacked, our first thought is "wait, do we use that anywhere?" and answering it means grepping lockfiles across dozens of repos and machines. So we built…

      Read full on X, posted by @emgeekboy

      @emgeekboy · x.com

    • Introducing depx - open-source malicious package & supply-chain intelligence, in your terminal. Hijacked publishes, credential stealers, install-script backdoors. depx tells you in seconds if they're…

      Read full on X, posted by @pdiscoveryio

      @pdiscoveryio · x.com

You might also like

Repositories close to projectdiscovery/depx
FeaturedAdvertise to 180K+ monthly visitors
Busbar

Control what AI can do before it acts

AxiomCode

Give Al Agents a Deeper Understanding of Your Codebase with a Code Graph

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

DataDog/guarddog

Python

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

1.2k130

safedep/vet

Go

Protect against malicious open source packages 🤖

1.1k118

Cobenian/shai-hulud-detect

Shell

A simple project to detect the Shai-Hulud npm supply chain attack

41083

SocketDev/socket-cli

TypeScript

Command-line interface for socket.dev security analysis

33473

mkbhardwas12/pwned-deps

Python

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

164173

DataDog/supply-chain-firewall

Go

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

39828

ossillate-inc/packj

Python

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

69436

ossf/malicious-packages

Go

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

630151

ossf/package-analysis

Go

Open Source Package Analysis

92175