npmjs.org "sarif" keyword
@mcp-guard/cli 1.1.0
Command-line interface for mcp-guard: scan, fix, and monitor Model Context Protocol (MCP) server ...1 version - Latest release: 6 months ago - 23 downloads last month - 1 maintainer
@mcp-guard/api 1.1.0
REST API server (Fastify) exposing mcp-guard scan and fix operations over HTTP.1 version - Latest release: 6 months ago - 18 downloads last month - 0 stars on GitHub - 1 maintainer
@mcp-guard/core 2.1.0
Security scanning engine for Model Context Protocol (MCP) servers. Detects hardcoded secrets, com...1 version - Latest release: 6 months ago - 33 downloads last month - 1 maintainer
devarmour 0.1.0
DevArmour - find security mistakes before attackers do. Local-first security scanner for JavaScri...2 versions - Latest release: 42 minutes ago - 1 maintainer
spiderlint 0.144.0
Site-wide linter for SEO tags, security headers, TLS and links5 versions - Latest release: about 2 hours ago - 0 stars on GitHub - 1 maintainer
claude-crap 0.4.8
Deterministic QA plugin for Claude Code — CRAP index, Technical Debt Ratio, tree-sitter AST, SARI...19 versions - Latest release: 6 months ago - 83 downloads last month - 7 stars on GitHub - 1 maintainer
foxguard 0.14.0
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...24 versions - Latest release: about 1 month ago - 1.97 thousand downloads last month - 304 stars on GitHub - 1 maintainer
@sr-herz/claude-sonar 0.1.2 removed
Deterministic QA plugin for Claude Code — CRAP index, Technical Debt Ratio, tree-sitter AST, SARI...3 versions - Latest release: 6 months ago - 7 stars on GitHub - 1 maintainer
@sabahattink/codediag 0.5.0
Automated project health scanner for Node.js, NestJS, Express, and Next.js projects.4 versions - Latest release: 12 days ago - 531 downloads last month - 2 stars on GitHub - 1 maintainer
trustmcp 0.2.1
Static security scanner for JavaScript/TypeScript MCP servers. Detect risky shell, secret, filesy...3 versions - Latest release: 3 months ago - 104 downloads last month - 1 stars on GitHub - 1 maintainer
@jobersteadt/vibescan 1.1.1
Developer-first JavaScript/TypeScript security scanner with static analysis, proof-oriented tests...4 versions - Latest release: 6 months ago - 13 downloads last month - 0 stars on GitHub - 1 maintainer
agentsec 0.4.0
Security auditing CLI for AI agent skills — OWASP Agentic Skills Top 10 (AST10)23 versions - Latest release: 4 months ago - 2.11 thousand downloads last month - 5 stars on GitHub - 1 maintainer
openlens 0.2.3
AI-powered code review using specialized agents4 versions - Latest release: 7 months ago - 26 downloads last month - 6 stars on GitHub - 1 maintainer
coderot-engine 1.14.0
Find your most dangerous technical debt — before it finds you.20 versions - Latest release: 5 months ago - 1.59 thousand downloads last month - 1 maintainer
Top 6.7% on npmjs.org
96 versions - Latest release: 14 days ago - 1 dependent package - 2 dependent repositories - 3.09 million downloads last month - 1,463 stars on GitHub - 1 maintainer
@secretlint/secretlint-formatter-sarif 13.0.7 💰
A secretlint formatter for SARIF format96 versions - Latest release: 14 days ago - 1 dependent package - 2 dependent repositories - 3.09 million downloads last month - 1,463 stars on GitHub - 1 maintainer
@emisso/security-cli 0.1.0
CLI for AI-powered security scanning of codebases and pull requests1 version - Latest release: 7 months ago - 26 downloads last month - 0 stars on GitHub - 1 maintainer
@emisso/security 0.1.0
AI-powered security scanner for codebases and pull requests — SAST, secrets, dependencies, threat...1 version - Latest release: 7 months ago - 32 downloads last month - 0 stars on GitHub - 1 maintainer
tactual 0.5.0
Screen-reader navigation cost analyzer. Measures how hard it is for AT users to discover, reach, ...9 versions - Latest release: 4 months ago - 245 downloads last month - 1 stars on GitHub - 1 maintainer
evershield 0.1.0
Shield everything, everywhere: find what your web app exposes to the browser before attackers do2 versions - Latest release: about 8 hours ago - 1 maintainer
pqaudit 0.5.0 💰
Post-quantum cryptography readiness scanner. Finds quantum-vulnerable cryptography in your codeba...3 versions - Latest release: 6 months ago - 1 stars on GitHub - 1 maintainer
patchdrift 1.1.1
Check CVE ids, GHSA ids, package coordinates, SBOM purls or product versions for vulnerability re...3 versions - Latest release: about 10 hours ago - 33 downloads last month - 1 maintainer
sentinelflow 0.5.0
AI agent governance platform — static scanning + runtime interception for Claude Code, Cursor, Gi...7 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
rust-doctor 0.7.0
Local-first Rust project health audit30 versions - Latest release: about 1 month ago - 335 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/darwin-arm64 0.7.0
Rust Doctor native binary for darwin arm648 versions - Latest release: about 1 month ago - 244 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/win32-x64 0.7.0
Rust Doctor native binary for win32 x648 versions - Latest release: about 1 month ago - 70 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/darwin-x64 0.7.0
Rust Doctor native binary for darwin x648 versions - Latest release: about 1 month ago - 71 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/linux-x64 0.7.0
Rust Doctor native binary for linux x648 versions - Latest release: about 1 month ago - 386 downloads last month - 20 stars on GitHub - 1 maintainer
@rustdoctor/linux-arm64 0.7.0
Rust Doctor native binary for linux arm648 versions - Latest release: about 1 month ago - 75 downloads last month - 20 stars on GitHub - 1 maintainer
safegres 1.29.1
Postgres security and performance auditor: RLS, grants and effective-access analysis plus index a...119 versions - Latest release: about 10 hours ago - 13.5 thousand downloads last month - 58 stars on GitHub - 1 maintainer
@penumbraforge/vexes 0.5.0
Cross-ecosystem dependency security scanner. Shakes the tree to see what falls. Zero dependencies.5 versions - Latest release: about 2 months ago - 12 downloads last month - 1 stars on GitHub - 1 maintainer
pwnkit-cli 0.11.1
pwnkit-cli npm launcher — downloads and runs the standalone binary on first invocation.46 versions - Latest release: 5 months ago - 1.8 thousand downloads last month - 505 stars on GitHub - 1 maintainer
semver-gauge 1.0.0 💰
CI gate that checks your version bump matches the changes since the last release (Conventional Co...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
gherkin-refine 1.4.3 💰
Gherkin and Cucumber linter with gherkin-lint compatibility: all 31 gherkin-lint rules, safe auto...19 versions - Latest release: about 22 hours ago - 1.13 thousand downloads last month - 1 stars on GitHub - 1 maintainer
supply-chain-guard 6.5.8
Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, e...184 versions - Latest release: about 22 hours ago - 9.17 thousand downloads last month - 7 stars on GitHub - 1 maintainer
@gianmarcomaz/vantyr 1.0.4
MCP security scanner — Trust Score for AI dev environments. 100% local, zero telemetry.5 versions - Latest release: 7 months ago - 13 downloads last month - 0 stars on GitHub - 1 maintainer
stop-ai-slop 2.1.0
Zero-dependency linter that blocks AI-generated comment slop. Enforces a one-line, why-only comme...18 versions - Latest release: 2 days ago - 2.7 thousand downloads last month - 6 stars on GitHub - 1 maintainer
@stableship/cli 1.0.0
Stableship from the terminal and CI: release status, findings, scoped checks, why a finding block...2 versions - Latest release: about 14 hours ago - 1 maintainer
multi-model-analyzer 1.1.0
Static analysis toolchain for large TypeScript/JavaScript codebases. Extracts symbols, dependency...1 version - Latest release: 7 months ago - 0 stars on GitHub - 1 maintainer
mcp-fence 1.1.0
The bidirectional firewall for MCP — scans inputs AND outputs, detects rug-pulls at runtime, zero...9 versions - Latest release: about 2 months ago - 128 downloads last month - 1 stars on GitHub - 1 maintainer
@grepture/cli 0.1.0
AI security scanner for developers — Scan for PII, secrets, prompt injection, and unsafe AI SDK u...1 version - Latest release: 7 months ago - 20 downloads last month - 0 stars on GitHub - 1 maintainer
bit-security-mcp 3.0.0
BIT Security Review — MCP server for devs + CLI for CI/CD pipelines. Activates 7 specialized agen...3 versions - Latest release: 5 months ago - 1 maintainer
@surea11y/cli 1.3.0
Command-line WCAG 2.2 accessibility scanner for static HTML, with baseline gating and HTML/SARIF/...4 versions - Latest release: about 17 hours ago - 37 downloads last month - 0 stars on GitHub - 1 maintainer
@cplieger/deadset-ts 7.1.0
Deterministic dead-code analysis for TypeScript, class and type members included58 versions - Latest release: 6 days ago - 10.6 thousand downloads last month - 0 stars on GitHub - 1 maintainer
Top 4.3% on npmjs.org
149 versions - Latest release: 2 months ago - 7 dependent packages - 28 dependent repositories - 16.2 million downloads last month - 18 stars on GitHub - 1 maintainer
node-sarif-builder 5.0.0 💰
Module to help building SARIF log files149 versions - Latest release: 2 months ago - 7 dependent packages - 28 dependent repositories - 16.2 million downloads last month - 18 stars on GitHub - 1 maintainer
decoy-scan 0.11.0
Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspi...27 versions - Latest release: about 2 months ago - 1.29 thousand downloads last month - 2 stars on GitHub - 1 maintainer
skilltotal 0.73.0
Static security scanner for MCP servers, agent skills and npm/PyPI packages. Runs the skilltotal ...19 versions - Latest release: about 23 hours ago - 1.48 thousand downloads last month - 11 stars on GitHub - 1 maintainer
@surea11y/core 1.12.0
Deterministic WCAG 2.2 accessibility engine that tells you what it can't tell you. Zero dependenc...19 versions - Latest release: about 19 hours ago - 1.09 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@merupatel/reachable 1.0.8
Local-first vulnerability reachability CLI for JavaScript and TypeScript10 versions - Latest release: 7 months ago - 0 stars on GitHub - 1 maintainer
breakit 1.2.1
AI-assisted exploratory testing CLI for web apps. Drives a real browser to surface UX issues, fun...14 versions - Latest release: 5 months ago - 1 maintainer
pqc-check 1.6.0
Scan your codebase for quantum-vulnerable cryptography8 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
@clawaudit/cli 1.0.3
Static security auditor for AI agent configs — CLAUDE.md, .mcp.json, .cursorrules. Compound threa...4 versions - Latest release: 7 months ago - 1 maintainer
nsauditor-ai-agent-skill 1.0.0
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP...114 versions - Latest release: 1 day ago - 1.35 thousand downloads last month - 4 stars on GitHub - 1 maintainer
nsauditor-ai 1.0.0
Modular AI-assisted network security audit platform — Community Edition151 versions - Latest release: 1 day ago - 1.54 thousand downloads last month - 23 stars on GitHub - 1 maintainer
@complytest/reporter 1.0.0 removed
Report generators for HTML, JSON, CSV, SARIF, PDF, and Complicer formats4 versions - Latest release: 7 months ago - 180 downloads last month - 1 maintainer
sadrazam 0.1.23 💰
Dependency analysis CLI for JavaScript and TypeScript projects with optional AI-powered insights.33 versions - Latest release: 5 months ago - 1.76 thousand downloads last month - 0 stars on GitHub - 1 maintainer
dead-deps-gauge 1.0.0 💰
Find dependencies declared in package.json but never imported, and imports missing from package.j...2 versions - Latest release: about 21 hours ago - 1 stars on GitHub - 1 maintainer
monorepo-gauge 1.0.0 💰
Hygiene checks for npm/yarn/pnpm workspaces: circular internal dependencies, internal ranges that...2 versions - Latest release: about 21 hours ago - 1 stars on GitHub - 1 maintainer
Top 2.6% on npmjs.org
225 versions - Latest release: 4 months ago - 4 dependent packages - 63 dependent repositories - 142 thousand downloads last month - 248 stars on GitHub - 1 maintainer
npm-groovy-lint 18.0.0 💰
Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files225 versions - Latest release: 4 months ago - 4 dependent packages - 63 dependent repositories - 142 thousand downloads last month - 248 stars on GitHub - 1 maintainer
supply-chain-sentinel 1.0.0 💰
One supply-chain gate for npm projects: runs package-tripwire (risky dependency changes), license...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
dotenv-sentinel 1.0.0 💰
Validate .env files against .env.example or a JSON schema (missing, empty, extra and mistyped var...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
redirect-sentinel 1.0.0 💰
Find open redirects and mixed content in a built site or a live crawl: http:// scripts, styles, f...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
tls-sentinel 1.0.0 💰
TLS endpoint checker: certificate expiry, hostname mismatch, untrusted or incomplete chains, self...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
phish-sentinel 1.0.0 💰
Offline phishing URL heuristics: lookalike and homograph domains, brand impersonation, IP hosts, ...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
dockerfile-sentinel 1.0.0 💰
Dockerfile and Docker Compose security linter: root users, unpinned or EOL base images, hardcoded...2 versions - Latest release: about 22 hours ago - 1 stars on GitHub - 1 maintainer
Top 1.2% on npmjs.org
32 versions - Latest release: 4 months ago - 15 dependent packages - 611 dependent repositories - 4.78 million downloads last month - 6,331 stars on GitHub - 1 maintainer
@jscpd/core 4.2.5 💰
core functionality of copy/paste detector for jscpd32 versions - Latest release: 4 months ago - 15 dependent packages - 611 dependent repositories - 4.78 million downloads last month - 6,331 stars on GitHub - 1 maintainer
@kirrosh/zond 0.28.0
API hygiene scanner for small teams and their coding agents — test REST API endpoints against the...32 versions - Latest release: 3 months ago - 2.1 thousand downloads last month - 0 stars on GitHub - 1 maintainer
prosecheck 0.8.2
LLM-powered code linter with natural-language rules13 versions - Latest release: 6 months ago - 0 stars on GitHub - 1 maintainer
shipguard-cli 2.0.0
AI-powered security scanner with Claude API integration and MCP server support1 version - Latest release: 8 months ago - 2 stars on GitHub - 1 maintainer
@tuguidragos/qxlint 0.3.7 💰
Deterministic static checks for Qiskit Primitives V2 workflows7 versions - Latest release: 10 days ago - 68 downloads last month - 0 stars on GitHub - 1 maintainer
docguard-cli 0.45.1
The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your proj...92 versions - Latest release: 1 day ago - 7.74 thousand downloads last month - 32 stars on GitHub - 1 maintainer
@mrzadexinho/scanline 0.2.0
Security scanning MCP server — semgrep integration, SARIF parsing, and finding triage for Claude ...2 versions - Latest release: 7 months ago - 23 downloads last month - 1 stars on GitHub - 1 maintainer
mcp-sentinel 0.2.3
Scan, score, and enforce security policies on MCP servers. Risk scoring (A-F), SARIF output, poli...9 versions - Latest release: 7 months ago - 99 downloads last month - 0 stars on GitHub - 1 maintainer
@vexlit/cli 0.1.5
VEXLIT CLI — AI-powered code security vulnerability scanner6 versions - Latest release: 7 months ago - 56 downloads last month - 0 stars on GitHub - 1 maintainer
@vexlit/core 0.1.1
VEXLIT core analysis engine — AI-powered code security vulnerability scanner2 versions - Latest release: 7 months ago - 32 downloads last month - 0 stars on GitHub - 1 maintainer
@tedy69/health-cli 1.0.0
CLI for Project Health Diagnostics — one command to produce an actionable health report1 version - Latest release: 8 months ago - 49 downloads last month - 0 stars on GitHub - 1 maintainer
@enwithai/spec-check 0.2.0
Deterministic, offline checks that each requirement in a Markdown or Spec Kit spec is clear and v...5 versions - Latest release: 1 day ago - 758 downloads last month - 0 stars on GitHub - 1 maintainer
ngx-security-audit 2.0.1
The most comprehensive Angular security auditing tool. 150+ rules, 10 scan types (OWASP, API secu...8 versions - Latest release: 7 months ago - 1 maintainer
@radu_api/sentinel-scan 1.3.0 removed
Static analysis CLI tool that extracts and verifies technical evidence for EU AI Act compliance. ...26 versions - Latest release: 7 months ago - 591 downloads last month - 0 stars on GitHub - 1 maintainer
code-auditor-mcp 5.0.2
Enforces architectural invariants and code quality rules inside your AI agent's edit loop.94 versions - Latest release: 7 days ago - 5.37 thousand downloads last month - 8 stars on GitHub - 1 maintainer
@ferhattahar/antra-next 0.2.2
AST-based static analysis security linter for React Server Components and the Next.js App Router.2 versions - Latest release: 7 days ago - 411 downloads last month - 2 stars on GitHub - 1 maintainer
license-sentinel 1.1.0 💰
License compliance gate for npm projects: reads node_modules and npm/pnpm/yarn lockfiles, resolve...3 versions - Latest release: 1 day ago - 1 stars on GitHub - 1 maintainer
skill-check 1.2.0 💰
Linter for agent skill files5 versions - Latest release: 8 months ago - 78.3 thousand downloads last month - 188 stars on GitHub - 1 maintainer
@sansavision/sansa-audit 0.1.0-alpha-20260228.1 removed
Deterministic security test framework — 84 rules, SARIF 2.1.0, legally defensible1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@mike007jd/openclaw-clawshield 1.0.0
Security scanner for OpenClaw skills1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@devtaeyeong/agentlint 0.1.0
Lint coding-agent config: CLAUDE.md, AGENTS.md, Cursor rules, Claude Code settings and hooks, MCP...2 versions - Latest release: 1 day ago - 1 maintainer
swynx 1.0.1
CWE-561 dead code security analysis across 26 languages. Find unreachable files, dead functions, ...1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
ironheights 0.7.0
Local-first security scanner and integrity monitor for OpenClaw skills.13 versions - Latest release: 1 day ago - 1.32 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@repoguard.26/repoguard 1.5.2
The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrule...8 versions - Latest release: 19 days ago - 1.19 thousand downloads last month - 2 stars on GitHub - 1 maintainer
repoguard-rules 1.7.0
The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrule...11 versions - Latest release: 2 days ago - 1.19 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@amittksharma/leaklint 0.0.1
Find log statements that leak secrets or personal data (PII) in JavaScript and TypeScript. A zero...2 versions - Latest release: 2 days ago - 1 maintainer
mergesafe 0.1.0
Multi-engine MCP and repository security scanner (offline-first CLI).1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
@sigmabytes-official/mcpguard 0.1.0
Offline-first security auditor for MCP (Model Context Protocol) configurations1 version - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer
n8n-nodes-nocodesec 0.1.4
n8n community node for NoCodeSec public API1 version - Latest release: 8 months ago - 9 downloads last month - 1 maintainer
un-editorial-check 1.8.1
Reads user-visible copy the way a UN editor would: language, wording, tone, spelling, terminology...21 versions - Latest release: 2 days ago - 1.54 thousand downloads last month - 1 stars on GitHub - 1 maintainer
@openaudit/cli 0.2.1
Audit codebases, URLs, running apps, containers, IaC and mobile builds for security, accessibilit...4 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
agentcheckup 0.0.0
Name reserved for agentcheckup. Lint AGENTS.md, CLAUDE.md, SKILL.md, Cursor rules and MCP configs...2 versions - Latest release: 2 days ago - 1 maintainer
codopsy-ts 1.4.0
AST-level code quality analyzer for TypeScript & JavaScript. Cyclomatic & cognitive complexity, 1...6 versions - Latest release: 8 months ago - 700 downloads last month - 0 stars on GitHub - 1 maintainer
@guava-parity/guard-scanner 17.0.0 💰
Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 — OWASP Agentic Top 10 2026 Full Cover...10 versions - Latest release: 7 months ago - 467 downloads last month - 2 stars on GitHub - 1 maintainer
guard-scanner 5.0.8 💰
Agent security scanner + runtime guard — 150 static patterns (23 categories), 26 runtime checks (...18 versions - Latest release: 8 months ago - 1.88 thousand downloads last month - 2 stars on GitHub - 1 maintainer
sbom-diff-sentinel 1.0.0
SBOM diff gate: compares CycloneDX 1.4-1.6 / SPDX 2.3 SBOMs or git refs, reports added, removed, ...2 versions - Latest release: 2 days ago - 1 maintainer
Related Keywords
security
339
cli
330
typescript
260
static-analysis
254
mcp
226
linter
144
devsecops
144
ai
127
ci
117
developer-tools
112
testing
111
scanner
109
accessibility
107
code-quality
105
github-actions
105
github-action
102
model-context-protocol
101
monorepo
99
a11y
96
wcag
91
claude-code
91
claude
90
aria
84
json-ld
83
sast
82
data-processing
81
customer-facing
81
act
81
earl
81
horizon2020
81
cursor
76
supply-chain
75
ai-agents
75
audit
73
owasp
71
rust
70
mcp-server
70
code-review
68
llm
67
supply-chain-security
65
prompt-injection
64
ai-security
59
lint
54
code-scanning
50
security-scanner
49
codex
44
vulnerability-scanner
43
ai-agent
43
skills
41
golang
39
npm
39
javascript
39
compliance
37
vulnerability
37
nodejs
36
secrets
36
coding-agents
36
nextjs
35
ci-cd
35
code-duplication
35
security-tools
35
devtools
34
pre-commit
33
agent-security
33
sbom
31
llm-security
31
copy-paste
30
cpd
30
agent-skills
30
dry
29
appsec
28
copy-paste-detection
28
openai
27
clones-detection
27
duplicates
27
python
26
secret-scanning
24
osv
24
validator
23
ast
23
provenance
22
guardrails
22
copilot
22
mcp-security
22
playwright
22
anthropic
22
penetration-testing
20
junit
20
express
20
jscpd
20
react
19
security-audit
19
tool-poisoning
19
platform-package
19
native-binary
19
go
19
prebuilt
19
local-first
18
secrets-detection
18
lockfile
18