An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "sarif" keyword

@mcp-guard/cli 1.1.0
Command-line interface for mcp-guard: scan, fix, and monitor Model Context Protocol (MCP) server ...
1 version - Latest release: 6 months ago - 23 downloads last month - 1 maintainer
@mcp-guard/api 1.1.0
REST API server (Fastify) exposing mcp-guard scan and fix operations over HTTP.
1 version - Latest release: 6 months ago - 18 downloads last month - 0 stars on GitHub - 1 maintainer
@mcp-guard/core 2.1.0
Security scanning engine for Model Context Protocol (MCP) servers. Detects hardcoded secrets, com...
1 version - Latest release: 6 months ago - 33 downloads last month - 1 maintainer
devarmour 0.1.0
DevArmour - find security mistakes before attackers do. Local-first security scanner for JavaScri...
2 versions - Latest release: 42 minutes ago - 1 maintainer
spiderlint 0.144.0
Site-wide linter for SEO tags, security headers, TLS and links
5 versions - Latest release: about 2 hours ago - 0 stars on GitHub - 1 maintainer
claude-crap 0.4.8
Deterministic QA plugin for Claude Code — CRAP index, Technical Debt Ratio, tree-sitter AST, SARI...
19 versions - Latest release: 6 months ago - 83 downloads last month - 7 stars on GitHub - 1 maintainer
foxguard 0.14.0
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...
24 versions - Latest release: about 1 month ago - 1.97 thousand downloads last month - 304 stars on GitHub - 1 maintainer
@sr-herz/claude-sonar 0.1.2 removed
Deterministic QA plugin for Claude Code — CRAP index, Technical Debt Ratio, tree-sitter AST, SARI...
3 versions - Latest release: 6 months ago - 7 stars on GitHub - 1 maintainer
@sabahattink/codediag 0.5.0
Automated project health scanner for Node.js, NestJS, Express, and Next.js projects.
4 versions - Latest release: 12 days ago - 531 downloads last month - 2 stars on GitHub - 1 maintainer
trustmcp 0.2.1
Static security scanner for JavaScript/TypeScript MCP servers. Detect risky shell, secret, filesy...
3 versions - Latest release: 3 months ago - 104 downloads last month - 1 stars on GitHub - 1 maintainer
@jobersteadt/vibescan 1.1.1
Developer-first JavaScript/TypeScript security scanner with static analysis, proof-oriented tests...
4 versions - Latest release: 6 months ago - 13 downloads last month - 0 stars on GitHub - 1 maintainer
agentsec 0.4.0
Security auditing CLI for AI agent skills — OWASP Agentic Skills Top 10 (AST10)
23 versions - Latest release: 4 months ago - 2.11 thousand downloads last month - 5 stars on GitHub - 1 maintainer
openlens 0.2.3
AI-powered code review using specialized agents
4 versions - Latest release: 7 months ago - 26 downloads last month - 6 stars on GitHub - 1 maintainer
coderot-engine 1.14.0
Find your most dangerous technical debt — before it finds you.
20 versions - Latest release: 5 months ago - 1.59 thousand downloads last month - 1 maintainer
Top 6.7% on npmjs.org
@secretlint/secretlint-formatter-sarif 13.0.7 💰
A secretlint formatter for SARIF format
96 versions - Latest release: 14 days ago - 1 dependent package - 2 dependent repositories - 3.09 million downloads last month - 1,463 stars on GitHub - 1 maintainer
@emisso/security-cli 0.1.0
CLI for AI-powered security scanning of codebases and pull requests
1 version - Latest release: 7 months ago - 26 downloads last month - 0 stars on GitHub - 1 maintainer
@emisso/security 0.1.0
AI-powered security scanner for codebases and pull requests — SAST, secrets, dependencies, threat...
1 version - Latest release: 7 months ago - 32 downloads last month - 0 stars on GitHub - 1 maintainer
tactual 0.5.0
Screen-reader navigation cost analyzer. Measures how hard it is for AT users to discover, reach, ...
9 versions - Latest release: 4 months ago - 245 downloads last month - 1 stars on GitHub - 1 maintainer
evershield 0.1.0
Shield everything, everywhere: find what your web app exposes to the browser before attackers do
2 versions - Latest release: about 8 hours ago - 1 maintainer
pqaudit 0.5.0 💰
Post-quantum cryptography readiness scanner. Finds quantum-vulnerable cryptography in your codeba...
3 versions - Latest release: 6 months ago - 1 stars on GitHub - 1 maintainer
patchdrift 1.1.1
Check CVE ids, GHSA ids, package coordinates, SBOM purls or product versions for vulnerability re...
3 versions - Latest release: about 10 hours ago - 33 downloads last month - 1 maintainer
sentinelflow 0.5.0
AI agent governance platform — static scanning + runtime interception for Claude Code, Cursor, Gi...
7 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
rust-doctor 0.7.0
Local-first Rust project health audit
30 versions - Latest release: about 1 month ago - 335 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/darwin-arm64 0.7.0
Rust Doctor native binary for darwin arm64
8 versions - Latest release: about 1 month ago - 244 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/win32-x64 0.7.0
Rust Doctor native binary for win32 x64
8 versions - Latest release: about 1 month ago - 70 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/darwin-x64 0.7.0
Rust Doctor native binary for darwin x64
8 versions - Latest release: about 1 month ago - 71 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/linux-x64 0.7.0
Rust Doctor native binary for linux x64
8 versions - Latest release: about 1 month ago - 386 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/linux-arm64 0.7.0
Rust Doctor native binary for linux arm64
8 versions - Latest release: about 1 month ago - 75 downloads last month - 20 stars on GitHub - 1 maintainer
safegres 1.29.1
Postgres security and performance auditor: RLS, grants and effective-access analysis plus index a...
119 versions - Latest release: about 10 hours ago - 13.5 thousand downloads last month - 58 stars on GitHub - 1 maintainer
@penumbraforge/vexes 0.5.0
Cross-ecosystem dependency security scanner. Shakes the tree to see what falls. Zero dependencies.
5 versions - Latest release: about 2 months ago - 12 downloads last month - 1 stars on GitHub - 1 maintainer
pwnkit-cli 0.11.1
pwnkit-cli npm launcher — downloads and runs the standalone binary on first invocation.
46 versions - Latest release: 5 months ago - 1.8 thousand downloads last month - 505 stars on GitHub - 1 maintainer
semver-gauge 1.0.0 💰
CI gate that checks your version bump matches the changes since the last release (Conventional Co...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
gherkin-refine 1.4.3 💰
Gherkin and Cucumber linter with gherkin-lint compatibility: all 31 gherkin-lint rules, safe auto...
19 versions - Latest release: about 22 hours ago - 1.13 thousand downloads last month - 1 stars on GitHub - 1 maintainer
supply-chain-guard 6.5.8
Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, e...
184 versions - Latest release: about 22 hours ago - 9.17 thousand downloads last month - 7 stars on GitHub - 1 maintainer
@gianmarcomaz/vantyr 1.0.4
MCP security scanner — Trust Score for AI dev environments. 100% local, zero telemetry.
5 versions - Latest release: 7 months ago - 13 downloads last month - 0 stars on GitHub - 1 maintainer
stop-ai-slop 2.1.0
Zero-dependency linter that blocks AI-generated comment slop. Enforces a one-line, why-only comme...
18 versions - Latest release: 2 days ago - 2.7 thousand downloads last month - 6 stars on GitHub - 1 maintainer
@stableship/cli 1.0.0
Stableship from the terminal and CI: release status, findings, scoped checks, why a finding block...
2 versions - Latest release: about 14 hours ago - 1 maintainer
multi-model-analyzer 1.1.0
Static analysis toolchain for large TypeScript/JavaScript codebases. Extracts symbols, dependency...
1 version - Latest release: 7 months ago - 0 stars on GitHub - 1 maintainer
mcp-fence 1.1.0
The bidirectional firewall for MCP — scans inputs AND outputs, detects rug-pulls at runtime, zero...
9 versions - Latest release: about 2 months ago - 128 downloads last month - 1 stars on GitHub - 1 maintainer
@grepture/cli 0.1.0
AI security scanner for developers — Scan for PII, secrets, prompt injection, and unsafe AI SDK u...
1 version - Latest release: 7 months ago - 20 downloads last month - 0 stars on GitHub - 1 maintainer
bit-security-mcp 3.0.0
BIT Security Review — MCP server for devs + CLI for CI/CD pipelines. Activates 7 specialized agen...
3 versions - Latest release: 5 months ago - 1 maintainer
@surea11y/cli 1.3.0
Command-line WCAG 2.2 accessibility scanner for static HTML, with baseline gating and HTML/SARIF/...
4 versions - Latest release: about 17 hours ago - 37 downloads last month - 0 stars on GitHub - 1 maintainer
@cplieger/deadset-ts 7.1.0
Deterministic dead-code analysis for TypeScript, class and type members included
58 versions - Latest release: 6 days ago - 10.6 thousand downloads last month - 0 stars on GitHub - 1 maintainer
Top 4.3% on npmjs.org
node-sarif-builder 5.0.0 💰
Module to help building SARIF log files
149 versions - Latest release: 2 months ago - 7 dependent packages - 28 dependent repositories - 16.2 million downloads last month - 18 stars on GitHub - 1 maintainer
decoy-scan 0.11.0
Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspi...
27 versions - Latest release: about 2 months ago - 1.29 thousand downloads last month - 2 stars on GitHub - 1 maintainer
skilltotal 0.73.0
Static security scanner for MCP servers, agent skills and npm/PyPI packages. Runs the skilltotal ...
19 versions - Latest release: about 23 hours ago - 1.48 thousand downloads last month - 11 stars on GitHub - 1 maintainer
@surea11y/core 1.12.0
Deterministic WCAG 2.2 accessibility engine that tells you what it can't tell you. Zero dependenc...
19 versions - Latest release: about 19 hours ago - 1.09 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@merupatel/reachable 1.0.8
Local-first vulnerability reachability CLI for JavaScript and TypeScript
10 versions - Latest release: 7 months ago - 0 stars on GitHub - 1 maintainer
breakit 1.2.1
AI-assisted exploratory testing CLI for web apps. Drives a real browser to surface UX issues, fun...
14 versions - Latest release: 5 months ago - 1 maintainer
pqc-check 1.6.0
Scan your codebase for quantum-vulnerable cryptography
8 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
@clawaudit/cli 1.0.3
Static security auditor for AI agent configs — CLAUDE.md, .mcp.json, .cursorrules. Compound threa...
4 versions - Latest release: 7 months ago - 1 maintainer
nsauditor-ai-agent-skill 1.0.0
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP...
114 versions - Latest release: 1 day ago - 1.35 thousand downloads last month - 4 stars on GitHub - 1 maintainer
nsauditor-ai 1.0.0
Modular AI-assisted network security audit platform — Community Edition
151 versions - Latest release: 1 day ago - 1.54 thousand downloads last month - 23 stars on GitHub - 1 maintainer
@complytest/reporter 1.0.0 removed
Report generators for HTML, JSON, CSV, SARIF, PDF, and Complicer formats
4 versions - Latest release: 7 months ago - 180 downloads last month - 1 maintainer
sadrazam 0.1.23 💰
Dependency analysis CLI for JavaScript and TypeScript projects with optional AI-powered insights.
33 versions - Latest release: 5 months ago - 1.76 thousand downloads last month - 0 stars on GitHub - 1 maintainer
dead-deps-gauge 1.0.0 💰
Find dependencies declared in package.json but never imported, and imports missing from package.j...
2 versions - Latest release: about 21 hours ago - 1 stars on GitHub - 1 maintainer
monorepo-gauge 1.0.0 💰
Hygiene checks for npm/yarn/pnpm workspaces: circular internal dependencies, internal ranges that...
2 versions - Latest release: about 21 hours ago - 1 stars on GitHub - 1 maintainer
Top 2.6% on npmjs.org
npm-groovy-lint 18.0.0 💰
Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files
225 versions - Latest release: 4 months ago - 4 dependent packages - 63 dependent repositories - 142 thousand downloads last month - 248 stars on GitHub - 1 maintainer
supply-chain-sentinel 1.0.0 💰
One supply-chain gate for npm projects: runs package-tripwire (risky dependency changes), license...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
dotenv-sentinel 1.0.0 💰
Validate .env files against .env.example or a JSON schema (missing, empty, extra and mistyped var...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
redirect-sentinel 1.0.0 💰
Find open redirects and mixed content in a built site or a live crawl: http:// scripts, styles, f...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
tls-sentinel 1.0.0 💰
TLS endpoint checker: certificate expiry, hostname mismatch, untrusted or incomplete chains, self...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
phish-sentinel 1.0.0 💰
Offline phishing URL heuristics: lookalike and homograph domains, brand impersonation, IP hosts, ...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
dockerfile-sentinel 1.0.0 💰
Dockerfile and Docker Compose security linter: root users, unpinned or EOL base images, hardcoded...
2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
Top 1.2% on npmjs.org
@jscpd/core 4.2.5 💰
core functionality of copy/paste detector for jscpd
32 versions - Latest release: 4 months ago - 15 dependent packages - 611 dependent repositories - 4.78 million downloads last month - 6,331 stars on GitHub - 1 maintainer
@kirrosh/zond 0.28.0
API hygiene scanner for small teams and their coding agents — test REST API endpoints against the...
32 versions - Latest release: 3 months ago - 2.1 thousand downloads last month - 0 stars on GitHub - 1 maintainer
prosecheck 0.8.2
LLM-powered code linter with natural-language rules
13 versions - Latest release: 6 months ago - 0 stars on GitHub - 1 maintainer
shipguard-cli 2.0.0
AI-powered security scanner with Claude API integration and MCP server support
1 version - Latest release: 8 months ago - 2 stars on GitHub - 1 maintainer
@tuguidragos/qxlint 0.3.7 💰
Deterministic static checks for Qiskit Primitives V2 workflows
7 versions - Latest release: 10 days ago - 68 downloads last month - 0 stars on GitHub - 1 maintainer
docguard-cli 0.45.1
The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your proj...
92 versions - Latest release: 1 day ago - 7.74 thousand downloads last month - 32 stars on GitHub - 1 maintainer
@mrzadexinho/scanline 0.2.0
Security scanning MCP server — semgrep integration, SARIF parsing, and finding triage for Claude ...
2 versions - Latest release: 7 months ago - 23 downloads last month - 1 stars on GitHub - 1 maintainer
mcp-sentinel 0.2.3
Scan, score, and enforce security policies on MCP servers. Risk scoring (A-F), SARIF output, poli...
9 versions - Latest release: 7 months ago - 99 downloads last month - 0 stars on GitHub - 1 maintainer
@vexlit/cli 0.1.5
VEXLIT CLI — AI-powered code security vulnerability scanner
6 versions - Latest release: 7 months ago - 56 downloads last month - 0 stars on GitHub - 1 maintainer
@vexlit/core 0.1.1
VEXLIT core analysis engine — AI-powered code security vulnerability scanner
2 versions - Latest release: 7 months ago - 32 downloads last month - 0 stars on GitHub - 1 maintainer
@tedy69/health-cli 1.0.0
CLI for Project Health Diagnostics — one command to produce an actionable health report
1 version - Latest release: 8 months ago - 49 downloads last month - 0 stars on GitHub - 1 maintainer
@enwithai/spec-check 0.2.0
Deterministic, offline checks that each requirement in a Markdown or Spec Kit spec is clear and v...
5 versions - Latest release: 1 day ago - 758 downloads last month - 0 stars on GitHub - 1 maintainer
ngx-security-audit 2.0.1
The most comprehensive Angular security auditing tool. 150+ rules, 10 scan types (OWASP, API secu...
8 versions - Latest release: 7 months ago - 1 maintainer
@radu_api/sentinel-scan 1.3.0 removed
Static analysis CLI tool that extracts and verifies technical evidence for EU AI Act compliance. ...
26 versions - Latest release: 7 months ago - 591 downloads last month - 0 stars on GitHub - 1 maintainer
code-auditor-mcp 5.0.2
Enforces architectural invariants and code quality rules inside your AI agent's edit loop.
94 versions - Latest release: 7 days ago - 5.37 thousand downloads last month - 8 stars on GitHub - 1 maintainer
@ferhattahar/antra-next 0.2.2
AST-based static analysis security linter for React Server Components and the Next.js App Router.
2 versions - Latest release: 7 days ago - 411 downloads last month - 2 stars on GitHub - 1 maintainer
license-sentinel 1.1.0 💰
License compliance gate for npm projects: reads node_modules and npm/pnpm/yarn lockfiles, resolve...
3 versions - Latest release: 1 day ago - 1 stars on GitHub - 1 maintainer
skill-check 1.2.0 💰
Linter for agent skill files
5 versions - Latest release: 8 months ago - 78.3 thousand downloads last month - 188 stars on GitHub - 1 maintainer
@sansavision/sansa-audit 0.1.0-alpha-20260228.1 removed
Deterministic security test framework — 84 rules, SARIF 2.1.0, legally defensible
1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@mike007jd/openclaw-clawshield 1.0.0
Security scanner for OpenClaw skills
1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@devtaeyeong/agentlint 0.1.0
Lint coding-agent config: CLAUDE.md, AGENTS.md, Cursor rules, Claude Code settings and hooks, MCP...
2 versions - Latest release: 1 day ago - 1 maintainer
swynx 1.0.1
CWE-561 dead code security analysis across 26 languages. Find unreachable files, dead functions, ...
1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
ironheights 0.7.0
Local-first security scanner and integrity monitor for OpenClaw skills.
13 versions - Latest release: 1 day ago - 1.32 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@repoguard.26/repoguard 1.5.2
The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrule...
8 versions - Latest release: 19 days ago - 1.19 thousand downloads last month - 2 stars on GitHub - 1 maintainer
repoguard-rules 1.7.0
The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrule...
11 versions - Latest release: 2 days ago - 1.19 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@amittksharma/leaklint 0.0.1
Find log statements that leak secrets or personal data (PII) in JavaScript and TypeScript. A zero...
2 versions - Latest release: 2 days ago - 1 maintainer
mergesafe 0.1.0
Multi-engine MCP and repository security scanner (offline-first CLI).
1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@sigmabytes-official/mcpguard 0.1.0
Offline-first security auditor for MCP (Model Context Protocol) configurations
1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
n8n-nodes-nocodesec 0.1.4
n8n community node for NoCodeSec public API
1 version - Latest release: 8 months ago - 9 downloads last month - 1 maintainer
un-editorial-check 1.8.1
Reads user-visible copy the way a UN editor would: language, wording, tone, spelling, terminology...
21 versions - Latest release: 2 days ago - 1.54 thousand downloads last month - 1 stars on GitHub - 1 maintainer
@openaudit/cli 0.2.1
Audit codebases, URLs, running apps, containers, IaC and mobile builds for security, accessibilit...
4 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
agentcheckup 0.0.0
Name reserved for agentcheckup. Lint AGENTS.md, CLAUDE.md, SKILL.md, Cursor rules and MCP configs...
2 versions - Latest release: 2 days ago - 1 maintainer
codopsy-ts 1.4.0
AST-level code quality analyzer for TypeScript & JavaScript. Cyclomatic & cognitive complexity, 1...
6 versions - Latest release: 8 months ago - 700 downloads last month - 0 stars on GitHub - 1 maintainer
@guava-parity/guard-scanner 17.0.0 💰
Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 — OWASP Agentic Top 10 2026 Full Cover...
10 versions - Latest release: 7 months ago - 467 downloads last month - 2 stars on GitHub - 1 maintainer
guard-scanner 5.0.8 💰
Agent security scanner + runtime guard — 150 static patterns (23 categories), 26 runtime checks (...
18 versions - Latest release: 8 months ago - 1.88 thousand downloads last month - 2 stars on GitHub - 1 maintainer
sbom-diff-sentinel 1.0.0
SBOM diff gate: compares CycloneDX 1.4-1.6 / SPDX 2.3 SBOMs or git refs, reports added, removed, ...
2 versions - Latest release: 2 days ago - 1 maintainer