An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "sast" keyword

sentinel-oracle 1.0.2
Sentinel Oracle โ€” Secure Merge Authorization Server. Physically separated merge authority that pr...
3 versions - Latest release: about 2 months ago - 26 downloads last month - 0 stars on GitHub - 1 maintainer
0sec-cli 0.21.4
Your self-improving, open-source cybersecurity team.
4 versions - Latest release: about 20 hours ago - 150 downloads last month - 80 stars on GitHub - 1 maintainer
@0sec/zero 0.21.2
Your self-improving, open-source cybersecurity team.
1 version - Latest release: 3 days ago - 80 stars on GitHub - 1 maintainer
@darkmoon_ai/client 0.1.0
Cross-version common client contract for Darkmoon OSS (CLI) and Darkmoon Pro (REST). Foundation f...
1 version - Latest release: about 2 hours ago - 1 maintainer
@kubbisec/aspm 1.0.53
KubbiSec ASPM โ€” Application Security Posture Management CLI
50 versions - Latest release: about 6 hours ago - 1.74 thousand downloads last month - 1 maintainer
agentwarden-cli 0.3.3
Zero-dependency static security gate, integrity lock and provenance SBOM for AI Agent Skills and ...
2 versions - Latest release: about 6 hours ago - 0 stars on GitHub - 1 maintainer
@guardbee/mcp-server-auditor 0.1.2
MCP server that audits other MCP servers' tool definitions for insecure patterns โ€” excessive-agen...
3 versions - Latest release: 9 days ago - 65 downloads last month - 0 stars on GitHub - 1 maintainer
@guardbee/mcp-prompt-injection-scanner 0.1.2
MCP server that scans documents, scraped pages, and RAG content for indirect prompt injection pay...
3 versions - Latest release: 9 days ago - 0 stars on GitHub - 1 maintainer
foxguard 0.14.0
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...
24 versions - Latest release: 9 days ago - 1.76 thousand downloads last month - 296 stars on GitHub - 1 maintainer
hakira-mcp 0.2.0
Hakira MCP server โ€” trigger Hakira cloud security audits from a coding agent
4 versions - Latest release: about 8 hours ago - 1 maintainer
@arcane-spark/ubel-node 0.16.2
Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via...
26 versions - Latest release: 4 days ago - 730 downloads last month - 4 stars on GitHub - 1 maintainer
vulnerability-hunter-next 0.2.1
Hunts vulnerabilities in a Next.js app on your Claude subscription, and reports a finding only on...
8 versions - Latest release: 12 days ago - 1.32 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@cognium/mcp-server 0.1.17
Model Context Protocol server exposing the circle-ir SAST engine as structured tools for LLM agen...
18 versions - Latest release: about 11 hours ago - 2.09 thousand downloads last month - 3 stars on GitHub - 2 maintainers
cognium-dev 4.9.25 ๐Ÿ’ฐ
Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking
201 versions - Latest release: about 11 hours ago - 3.16 thousand downloads last month - 3 stars on GitHub - 2 maintainers
circle-ir 4.9.25 ๐Ÿ’ฐ
High-performance Static Application Security Testing (SAST) library for detecting security vulner...
261 versions - Latest release: about 11 hours ago - 4.76 thousand downloads last month - 3 stars on GitHub - 2 maintainers
guardvibe 3.34.1 ๐Ÿ’ฐ
Security infrastructure your AI can't be โ€” deterministic, current past your model's training cuto...
206 versions - Latest release: 2 days ago - 1.56 thousand downloads last month - 5 stars on GitHub - 1 maintainer
@next-secure-check/reporter 0.6.0
Report formatting for next-secure-check
6 versions - Latest release: 24 days ago - 381 downloads last month - 8 stars on GitHub - 1 maintainer
@next-secure-check/core 0.6.0
Core scanning engine for next-secure-check
6 versions - Latest release: 24 days ago - 420 downloads last month - 8 stars on GitHub - 1 maintainer
@next-secure-check/rules 0.6.0
Security rules for next-secure-check
6 versions - Latest release: 24 days ago - 397 downloads last month - 8 stars on GitHub - 1 maintainer
next-secure-check 0.6.0
Deterministic security checks for Next.js projects. No AI required.
8 versions - Latest release: 24 days ago - 749 downloads last month - 8 stars on GitHub - 1 maintainer
@zzop/native-darwin-x64 0.19.0 deprecated
Prebuilt zzop-napi native addon for darwin/x64.
20 versions - Latest release: 2 months ago - 165 downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/native-darwin-arm64 0.19.0 deprecated
Prebuilt zzop-napi native addon for darwin/arm64.
20 versions - Latest release: 2 months ago - 158 downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli-darwin-arm64 0.35.0
zzop CLI native binary for darwin/arm64.
15 versions - Latest release: 1 day ago - 1.28 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli-linux-arm64-gnu 0.34.0
zzop CLI native binary for linux/arm64 (glibc).
14 versions - Latest release: 24 days ago - 1.12 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli-win32-x64-msvc 0.34.0
zzop CLI native binary for win32/x64 (MSVC ABI).
14 versions - Latest release: 24 days ago - 149 downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli 0.35.0
npm packaging of the native zzop CLI binary โ€” the same binary GitHub Releases ships, installed as...
35 versions - Latest release: 1 day ago - 1.89 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli-linux-x64-gnu 0.34.0
zzop CLI native binary for linux/x64 (glibc).
14 versions - Latest release: 24 days ago - 258 downloads last month - 2 stars on GitHub - 1 maintainer
@zzop/cli-darwin-x64 0.34.0
zzop CLI native binary for darwin/x64.
14 versions - Latest release: 24 days ago - 252 downloads last month - 2 stars on GitHub - 1 maintainer
github-security-mcp 0.1.0
GitHub security posture audit tools for AI agents โ€” organization, repository, Actions, secrets, s...
1 version - Latest release: 6 months ago - 13 stars on GitHub - 1 maintainer
@iflow-mcp/badchars-github-security-mcp 0.1.0
GitHub security posture audit tools for AI agents โ€” organization, repository, Actions, secrets, s...
1 version - Latest release: 5 months ago - 17 downloads last month - 13 stars on GitHub - 2 maintainers
@korayda4/vibe-security 1.4.0
Security guard MCP server for Vibe Coded projects โ€” scans Frontend and Backend across every layer...
4 versions - Latest release: 2 days ago - 182 downloads last month - 0 stars on GitHub - 1 maintainer
arko-mcp 0.5.15
Arko security tools for developers.
35 versions - Latest release: about 17 hours ago - 1.72 thousand downloads last month - 1 maintainer
codeql-development-mcp-server 2.27.1
An MCP server supporting LLM requests for CodeQL development tools and resources.
31 versions - Latest release: about 17 hours ago - 919 downloads last month - 34 stars on GitHub - 1 maintainer
eslint-plugin-import-next 2.8.9 ๐Ÿ’ฐ
ESLint plugin for imports and module boundaries โ€” drop-in replacement for eslint-plugin-import, 3...
49 versions - Latest release: 1 day ago - 12.1 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-secure-coding 5.4.11 ๐Ÿ’ฐ
ESLint plugin for secure coding โ€” detects LDAP, XPath, XXE, GraphQL and template injection, unsaf...
72 versions - Latest release: 1 day ago - 15.5 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@cognium-ai/mcp-server 4.16.1
MCP server exposing Cognium spec-conformance, spec-drift, and pattern-search tools over stdio
150 versions - Latest release: about 18 hours ago - 6.19 thousand downloads last month - 2 maintainers
cognium-ai 4.15.1
AI-powered static analysis CLI with LLM-enhanced vulnerability detection
257 versions - Latest release: 2 days ago - 6.09 thousand downloads last month - 2 maintainers
circle-ir-ai 4.16.1
LLM-enhanced SAST analysis built on circle-ir
271 versions - Latest release: about 19 hours ago - 10.9 thousand downloads last month - 2 maintainers
Top 9.1% on npmjs.org
@bearer/tsconfig 0.116.1
Bearer TSconfig base
101 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 308 downloads last month - 2,744 stars on GitHub - 4 maintainers
prooflayer-agent-security 4.0.0
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucinatio...
1 version - Latest release: 6 months ago - 1.97 thousand downloads last month - 122 stars on GitHub - 1 maintainer
xploitscan 1.12.0 ๐Ÿ’ฐ
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.
61 versions - Latest release: 8 days ago - 2.27 thousand downloads last month - 1 maintainer
@prooflayer/scanner-lite 1.0.0
Lightweight MCP security scanner for AI coding agents. 400+ YAML rules, tool-poisoning detection,...
1 version - Latest release: 7 months ago - 17 downloads last month - 122 stars on GitHub - 1 maintainer
eslint-plugin-node-security 5.6.4 ๐Ÿ’ฐ
ESLint plugin for Node.js security โ€” detects command injection, path traversal, SSRF, zip slip, a...
49 versions - Latest release: 2 days ago - 10.1 thousand downloads last month - 19 stars on GitHub - 1 maintainer
fallow-verdict 0.1.0
Review Fallow security findings with Jev and explanations for each verdict.
1 version - Latest release: 1 day ago - 0 stars on GitHub - 1 maintainer
agent-security-scanner-mcp 4.5.10
AI agent security scanner and npm audit for MCP servers, Claude Code, Cursor, and Windsurf. Find ...
82 versions - Latest release: 22 days ago - 4.72 thousand downloads last month - 122 stars on GitHub - 1 maintainer
@nebusec/nebu-plugin 1.0.13
Self-contained NebuSec Platform CLI plugin for Codex and Claude Code.
1 version - Latest release: 2 days ago - 0 stars on GitHub - 2 maintainers
eslint-plugin-jwt 2.2.14 deprecated ๐Ÿ’ฐ
ESLint plugin for JWT security โ€” detects algorithm confusion (CVE-2022-23540), alg:none, weak or ...
23 versions - Latest release: about 2 months ago - 1.37 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@ship-safe/cli 1.2.1
Security scanner for AI-generated code โ€” find vulnerabilities before you ship
18 versions - Latest release: about 22 hours ago - 113 downloads last month - 0 stars on GitHub - 1 maintainer
eslint-plugin-conventions 6.0.4 ๐Ÿ’ฐ
ESLint plugin for team code conventions โ€” enforces filename case, magic-number bans, commented-ou...
36 versions - Latest release: 2 days ago - 6.94 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@scanverra/cli 0.3.0
Scan your code for secrets, vulnerabilities, IaC and quality issues locally, and send results to ...
3 versions - Latest release: 2 days ago - 190 downloads last month - 1 maintainer
clawproof 1.0.0
Security scanner for AI agent skills and prompts - detects prompt injection, jailbreaks, and data...
1 version - Latest release: 7 months ago - 13 downloads last month - 122 stars on GitHub - 1 maintainer
@aaub-software/dsh-eslint-security-sast 0.2.0
ESLint Security SAST bundle and model-facing scan tool for DeepSeek Harness.
3 versions - Latest release: 7 days ago - 366 downloads last month - 0 stars on GitHub - 1 maintainer
@skarn-security/skarn 0.31.0
Skarn - AI coding session security scanner. Single static binary; this launcher resolves and runs...
15 versions - Latest release: 9 days ago - 1.45 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@iflow-mcp/sinewaveai-agent-security-scanner-mcp 3.18.1
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucinatio...
2 versions - Latest release: 7 months ago - 120 downloads last month - 122 stars on GitHub - 2 maintainers
safeweave-mcp 0.7.2
SafeWeave MCP server โ€” Free SAST, secrets, and dependency scanning for AI code editors. Upgrade t...
25 versions - Latest release: 1 day ago - 1.11 thousand downloads last month - 4 stars on GitHub - 1 maintainer
claudesec 0.7.2
DevSecOps toolkit for AI-assisted secure development โ€” security scanner, ISMS dashboard, asset ma...
5 versions - Latest release: 3 months ago - 270 downloads last month - 16 stars on GitHub - 1 maintainer
guardlink 2.1.0
GuardLink โ€” Security annotations for code. Threat modeling that lives in your codebase.
12 versions - Latest release: 7 days ago - 1.09 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@prooflayer/security-scanner 1.0.0
Lightweight, zero-Python security scanner MCP server for AI coding agents. Fast install (~5s), 17...
1 version - Latest release: 7 months ago - 22 downloads last month - 122 stars on GitHub - 1 maintainer
codeinspectus 3.2.0
CodeInspectus, by Synvoya โ€” a local-first security MCP server and CLI with CI policy, versioned e...
16 versions - Latest release: 17 days ago - 2.12 thousand downloads last month - 45 stars on GitHub - 1 maintainer
eslint-plugin-maintainability 3.2.12 ๐Ÿ’ฐ
ESLint plugin for maintainable code โ€” limits cognitive complexity, nesting depth, parameter count...
34 versions - Latest release: 2 days ago - 7.52 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-sqlite-security 0.1.11 ๐Ÿ’ฐ
ESLint plugin for better-sqlite3 / sqlite3 โ€” detects SQL injection in raw queries built with stri...
12 versions - Latest release: 20 days ago - 1.19 thousand downloads last month - 19 stars on GitHub - 1 maintainer
agent-security-policies 1.5.7
Portable, standards-backed security policies for any AI coding agent. One command to install OWAS...
9 versions - Latest release: 6 months ago - 39 downloads last month - 4 stars on GitHub - 1 maintainer
recodey-shield 0.5.0
CLI-first launch-readiness scanner for JavaScript and TypeScript projects. Detects secrets, misco...
15 versions - Latest release: 1 day ago - 1 maintainer
@interlace/eslint-devkit 1.19.6 ๐Ÿ’ฐ
Toolkit for building ESLint plugins in TypeScript โ€” AST helpers, type utilities, rule-creation sc...
42 versions - Latest release: 1 day ago - 34.5 thousand downloads last month - 19 stars on GitHub - 1 maintainer
swampo 1.4.4 unpublished ๐Ÿ’ฐ
The most complete skill pack for Claude Code โ€” 42 security, pentest, productivity & file skills +...
16 versions - Latest release: 5 months ago - 54,290 stars on GitHub - 1 maintainer
grim-mcp 0.6.3
Security audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise ga...
14 versions - Latest release: 2 days ago - 2.2 thousand downloads last month - 1 maintainer
auditai-scan 0.8.0
Deterministic security scanner for Next.js + Supabase apps: cross-tenant reads, RLS gaps, service...
13 versions - Latest release: 3 days ago - 1.91 thousand downloads last month - 2 stars on GitHub - 1 maintainer
eslint-plugin-react-features 1.7.8 ๐Ÿ’ฐ
ESLint plugin for React โ€” hooks, prop-types, JSX correctness, render performance, and class-to-ho...
33 versions - Latest release: 2 days ago - 7.19 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@seqra/opentaint-win32-arm64 0.4.6
Platform-specific binary for opentaint.
9 versions - Latest release: 20 days ago - 227 downloads last month - 157 stars on GitHub - 1 maintainer
eslint-plugin-pg 1.4.14 deprecated ๐Ÿ’ฐ
ESLint plugin for the pg PostgreSQL driver โ€” detects SQL injection, unreleased clients, floating ...
26 versions - Latest release: about 2 months ago - 587 downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-reliability 4.1.10 ๐Ÿ’ฐ
ESLint plugin for runtime reliability โ€” enforces error handling, network timeouts, null checks, a...
32 versions - Latest release: 2 days ago - 4.33 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@shomra/agent 0.3.32
Shomra - adversarial assurance for AI agents, as a local-first CLI. Blocks dangerous tool-calls b...
43 versions - Latest release: 3 days ago - 3.14 thousand downloads last month - 1 stars on GitHub - 1 maintainer
eslint-plugin-operability 4.1.6 ๐Ÿ’ฐ
ESLint plugin for production operability โ€” bans debug code and console logging in production, ver...
28 versions - Latest release: 1 day ago - 6.39 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@xenos1996/usa 2.25.3
Universal Software Auditor โ€” an open-source, self-adapting audit framework for any project, any s...
39 versions - Latest release: 8 days ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
eslint-plugin-browser-security 2.1.6 ๐Ÿ’ฐ
ESLint plugin for browser security โ€” detects DOM XSS, postMessage abuse, tokens in localStorage, ...
43 versions - Latest release: 2 days ago - 11.9 thousand downloads last month - 19 stars on GitHub - 1 maintainer
guardrail-cli-tool 2.5.4
Guardrail CLI - Enterprise security scanning with interactive menu, arrow navigation, and auto-in...
2 versions - Latest release: 5 months ago - 31 downloads last month - 1 maintainer
@havoc-security/cli 0.4.0
HAVOC โ€” framework-aware adversarial security scanner CLI
4 versions - Latest release: 3 days ago - 40 downloads last month - 1 maintainer
eslint-plugin-generalist 2.0.0 deprecated
AI-Era Generalist ESLint Plugin - Orchestrates expert domain plugins for velocity through AI know...
1 version - Latest release: 10 months ago - 18 downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-mcp-sdk-security 0.4.3 ๐Ÿ’ฐ
ESLint plugin for Model Context Protocol (MCP) SDK security โ€” catches tools registered without an...
11 versions - Latest release: 20 days ago - 1.04 thousand downloads last month - 19 stars on GitHub - 1 maintainer
dvalincode 0.20.1
Open security engineering for code written by humans and AI agents โ€” every repair carries its own...
9 versions - Latest release: 2 days ago - 515 downloads last month - 118 stars on GitHub - 1 maintainer
@havoc-security/scanner 0.2.0
HAVOC core scanning engine
2 versions - Latest release: 3 days ago - 14 downloads last month - 1 maintainer
eslint-plugin-llm-optimized 2.7.0 deprecated
ESLint rules that AI assistants can actually fix - error messages optimized for both human develo...
18 versions - Latest release: 10 months ago - 63 downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-modernization 3.1.5 ๐Ÿ’ฐ
ESLint plugin for modernizing JavaScript โ€” auto-fixes legacy patterns to ES2022+ (Array.at, templ...
22 versions - Latest release: 2 days ago - 5.96 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@nebusec/vega 1.0.13
Deprecated Vega security scanner CLI โ€” migrate to @nebusec/nebu.
13 versions - Latest release: 6 days ago - 266 downloads last month - 2 maintainers
codepathfinder 1.1.3
DEPRECATED - Use 'pip install codepathfinder' instead. See https://codepathfinder.dev/install
16 versions - Latest release: 9 months ago - 41 downloads last month - 139 stars on GitHub - 1 maintainer
verglos 1.8.3
Verglos hunts what AI agents shipped, verifies each finding locally, and signs the evidence.
32 versions - Latest release: about 1 month ago - 520 downloads last month - 0 stars on GitHub - 2 maintainers
@appknox/mcp-server 1.0.1
Official Model Context Protocol (MCP) server for Appknox - enables AI assistants to perform mobil...
2 versions - Latest release: 8 months ago - 47 downloads last month - 0 stars on GitHub - 2 maintainers
gadriel 1.4.1
Gadriel - Code-security CLI for AI-assisted development
37 versions - Latest release: 8 days ago - 296 downloads last month - 1 maintainer
@aaub-software/dsh-semgrep-sast 0.2.1
Semgrep SAST bundle and model-facing scan tool for DeepSeek Harness.
5 versions - Latest release: 5 days ago - 448 downloads last month - 1 stars on GitHub - 1 maintainer
oauthlint 0.15.0
Catch the OAuth, OIDC, JWT, and MCP security bugs AI coding tools produce. CLI for the oauthlint-...
26 versions - Latest release: 30 days ago - 297 downloads last month - 6 stars on GitHub - 1 maintainer
@tangxiaofeng7/dsh-sast 0.1.0-rc.4
DSH ็™ฝ็›’ๅฎก่ฎกๆจกๅผ๏ผšAI ้ฉฑๅŠจ็š„ SAST๏ผŒ่ฎฐๅฝ•ๆ–นๆณ•่ฎบใ€ๅฎก่ฎก้“พ่ทฏใ€ๆผๆดžไธŽไปฃ็ ่ต„ไบง๏ผŒๅนถๅœจ Web ไธญๅฏ่ง†ๅŒ–ๅฑ•็คบใ€‚
4 versions - Latest release: 5 days ago - 0 stars on GitHub - 1 maintainer
16-eyes 1.2.2
AI-driven security audits โ€” full-repo or diff/PR-scoped โ€” for Claude Code, Gemini CLI, Cursor, an...
8 versions - Latest release: 6 days ago - 408 downloads last month - 4 stars on GitHub - 1 maintainer
eslint-plugin-typeorm-security 0.3.8 ๐Ÿ’ฐ
ESLint plugin for typeorm โ€” detects SQL injection in raw queries built with string concatenation ...
13 versions - Latest release: 20 days ago - 906 downloads last month - 19 stars on GitHub - 1 maintainer
codebasescan 0.5.0
Local-first static auditing for Node.js, React, and Next.js codebases.
5 versions - Latest release: 9 days ago - 0 stars on GitHub - 1 maintainer
asiscan-cli 1.5.1
Static analysis for AI agent codebases. Audits against the OWASP Top 10 for Agentic Applications ...
1 version - Latest release: 3 days ago - 1 maintainer
trustline-scanner 0.1.0
Off-chain infrastructure security scanner: finds the config mistakes that turn one breach into fu...
1 version - Latest release: 4 days ago - 0 stars on GitHub - 1 maintainer
kikard 7.3.1
Detects hallucinated packages (slopsquatting), exposed secrets, and language-specific injection v...
7 versions - Latest release: 4 days ago - 1.1 thousand downloads last month - 0 stars on GitHub - 1 maintainer
Top 6.3% on npmjs.org
@soos-io/api-client 1.10.6 deprecated
This is the SOOS API Client for registered clients leveraging the various integrations to the SOO...
351 versions - Latest release: 6 months ago - 3 dependent packages - 1 dependent repositories - 25.1 thousand downloads last month - 0 stars on GitHub - 1 maintainer
eslint-plugin-mysql-security 0.3.8 ๐Ÿ’ฐ
ESLint plugin for mysql2 / mysql โ€” detects SQL injection in raw queries built with string concate...
13 versions - Latest release: 20 days ago - 795 downloads last month - 19 stars on GitHub - 1 maintainer
@xenos1996/usat 1.3.0 deprecated
Universal Software Audit Template โ€” an open-source, self-adapting audit framework for any project...
4 versions - Latest release: 15 days ago - 0 stars on GitHub - 1 maintainer