Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What’s the difference to npm audit?


I'm not convinced their tools are better than npm audit + a license checker package, although I suppose it's nice if you want a dashboard that works for many languages instead of just Node.

I've been very disappointed with their PR tools, and ended up turning off their automated PRs on _their suggestion_. (They will create dozens or hundreds of PRs to update dependencies, rather than rewriting them. Dependabot is 100x better to work with.)


They use a different vulnerability database. Snyk's contains vulnerabilities that NPM's doesn't have, and vice versa. We're using them both in combination.


It costs a lot. Especially any add-ons they upsell you on




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: