awesome-alternatives

compare

Grype vs OSV-Scanner

The same facts for both, read from GitHub every night, and the relation a person reviewed.

GrypeOSV-Scanner
LanguageGoGo
LicenceApache-2.0Apache-2.0
Stars13k11k
Latestv0.120.0v2.6.0
Last push2026-10-052026-10-05
Release cadenceabout 16 days between releasesabout 35 days between releases
Active contributors20 commit authors on the default branch in the last 90 days19 commit authors on the default branch in the last 90 days
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialGrypeDependency and container image scanning, from an image, a directory or an SBOM; no code or IaC scanning.

    PartialOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.