Sandworm Audit
sandworm.dev
Spec sheet
- Purpose
- Sandworm Audit scans a project and its dependencies for vulnerabilities, license issues, and metadata issues.Read 11 Oct 2026 · docs.sandworm.dev
- Intended users
- The homepage describes it for auditing JavaScript and PHP dependencies, with CLI use in terminal, CI, and Git hook workflows.Read 11 Oct 2026 · sandworm.dev
- Support
- The documentation directs support questions and feature requests to GitHub discussions and bug reports to GitHub issues.Read 11 Oct 2026 · docs.sandworm.dev
- CI integration
- Configurable fail conditions let the command line tool exit with code 1 for selected issue types or severities in CI or Git hook workflows.Read 11 Oct 2026 · docs.sandworm.dev
- Input requirement
- The application root directory must contain a package manifest and a supported lockfile.Read 11 Oct 2026 · docs.sandworm.dev
- Issue coverage
- Detected issues include CVEs, license problems, deprecated packages, install scripts, missing repositories, and HTTP, Git, or file dependencies.Read 11 Oct 2026 · docs.sandworm.dev
- Issue management
- Users can mark issues as resolved and configure custom license policies.Read 11 Oct 2026 · docs.sandworm.dev
- Outputs
- It generates JSON issue and license usage reports, CSV dependency data, and SVG dependency tree and treemap visualizations.Read 11 Oct 2026 · docs.sandworm.dev
- Package managers
- It supports npm, Yarn, pnpm, and Composer.Read 11 Oct 2026 · sandworm.dev
- Performance limit
- Generating charts for dense dependency graphs can require substantial memory, and the documentation suggests increasing Node memory, reducing chart depth, skipping the tree, or trying another package manager if it runs out of heap.Read 11 Oct 2026 · docs.sandworm.dev
- Private registries
- It can collect package information from custom or private registries configured through npm settings.Read 11 Oct 2026 · docs.sandworm.dev
- Runtime requirement
- Sandworm Audit requires Node 14.19 or later.Read 11 Oct 2026 · docs.sandworm.dev
- Workspaces
- It supports npm, Yarn, and pnpm workspaces.Read 11 Oct 2026 · github.com
Plans and prices
Sandworm Audit Free Free and open source command-line tool Read 11 Oct 2026 · docs.sandworm.dev
Where Specifiction places it
- Software Composition Analysis Software#52 of 657.2
Alternatives to Sandworm AuditAll alternatives →
Endor Labs Free plan 8.9 Visit 
DepWarden From $19/mo · Free plan 8.7 Visit 
Eclipse Steady Free plan 8.6 Visit 
Mend SCA From $20.83/mo 8.6 Visit 
Scantist Free plan 8.6 Visit