npmjs.org "sast" keyword
friday-protocol 2.0.0
BSSN-Aligned, Spec-Driven DevSecOps & Anti-Hallucination Governance Framework for Autonomous AI A...6 versions - Latest release: about 3 hours ago - 0 stars on GitHub - 1 maintainer
@checkvibe/ci 0.1.0
Run CheckVibe's pull-request security review from any CI job and fail the build on what the pull ...1 version - Latest release: about 1 month ago - 1 maintainer
guardvibe 3.63.0 💰
Security infrastructure your AI can't be — deterministic, current past your model's training cuto...238 versions - Latest release: about 7 hours ago - 7.98 thousand downloads last month - 6 stars on GitHub - 1 maintainer
@marketnow/sentinel-rules 1.1.2
29 security rules for MCP servers & agents — tool poisoning, prompt injection, exfiltration, atta...4 versions - Latest release: about 1 month ago - 602 downloads last month - 1 stars on GitHub - 1 maintainer
sfscanner 0.2.0
SecureFlow Scanner — Deterministic, offline security & dataflow analyzer for n8n workflows3 versions - Latest release: about 8 hours ago - 1 maintainer
@vettalon/darwin-arm64 0.3.1
vettalon binary for macOS ARM64 (Apple Silicon)7 versions - Latest release: about 9 hours ago - 0 stars on GitHub - 1 maintainer
@vettalon/darwin-x64 0.3.1
vettalon binary for macOS x64 (Intel)7 versions - Latest release: about 9 hours ago - 0 stars on GitHub - 1 maintainer
vettalon 0.3.1
Multi-model security audit for your own code: AI models from different vendors find bugs and a di...7 versions - Latest release: about 9 hours ago - 761 downloads last month - 0 stars on GitHub - 1 maintainer
@vettalon/linux-x64 0.3.1
vettalon binary for Linux x647 versions - Latest release: about 9 hours ago - 0 stars on GitHub - 1 maintainer
@vettalon/linux-arm64 0.3.1
vettalon binary for Linux ARM647 versions - Latest release: about 9 hours ago - 552 downloads last month - 0 stars on GitHub - 1 maintainer
@zibby/bin-semgrep 1.169.1
Zibby-owned, self-vendored Semgrep OSS engine (semgrep-core) delivery. Materializes the host-matc...2 versions - Latest release: about 1 month ago - 1 maintainer
@xenos1996/usa 2.26.2
Universal Software Auditor — an open-source, self-adapting audit framework for any project, any s...41 versions - Latest release: 12 days ago - 721 downloads last month - 0 stars on GitHub - 1 maintainer
foxguard 0.14.1
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...25 versions - Latest release: 3 days ago - 1.97 thousand downloads last month - 306 stars on GitHub - 1 maintainer
@0sec/zero 0.21.2
Your self-improving, open-source cybersecurity team.1 version - Latest release: 29 days ago - 129 downloads last month - 512 stars on GitHub - 1 maintainer
0sec-cli 0.24.1
Your self-improving, open-source cybersecurity team.10 versions - Latest release: 7 days ago - 1.12 thousand downloads last month - 512 stars on GitHub - 1 maintainer
appsecradar 0.1.0
Find the security holes your AI left behind. A security scanner for AI-built (vibe-coded) apps.2 versions - Latest release: about 13 hours ago - 1 maintainer
@catidegla/mcpaudit 0.1.1
Audit MCP servers and agent skills against the OWASP MCP Top 10. Runs locally, no API key, low fa...2 versions - Latest release: about 1 month ago - 36 downloads last month - 0 stars on GitHub - 1 maintainer
guardscan 1.0.5 💰
GuardScan - Privacy-first AI Code Review CLI with comprehensive security scanning6 versions - Latest release: 11 months ago - 25 downloads last month - 16 stars on GitHub - 1 maintainer
@hachiman94/agentguard 0.2.0
Scan AI coding agent extensions (skills, plugins, hooks, MCP servers) for unsafe patterns. Commun...2 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
deepcleaner-ag 1.0.8
High-accuracy, multi-layer defensive security, SAST, secret detection, dependency, and malware-in...8 versions - Latest release: about 2 months ago - 75 downloads last month - 0 stars on GitHub - 1 maintainer
mavensecguard 1.9.0
Zero-dependency multi-ecosystem application security scanner, SBOM generator and auto-remediation...1 version - Latest release: about 2 months ago - 34 downloads last month - 0 stars on GitHub - 1 maintainer
chimeraguard 1.5.0
ChimeraGuard - Multi-Vector DevSecOps Platform & Defense Arsenal (formerly ObsidianSec)1 version - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
@klars/mobscan-ci 0.1.1
CLI for submitting a build to a hosted mobscan instance and gating CI on the scan result. No scan...2 versions - Latest release: about 2 months ago - 25 downloads last month - 0 stars on GitHub - 1 maintainer
sentineldev 0.2.0
AI-powered application security scanner — scan diffs, review plans, and run pentests from the CLI3 versions - Latest release: about 2 months ago - 33 downloads last month - 3 stars on GitHub - 1 maintainer
@paretools/security 0.23.3 💰
MCP server for security scanning — structured Trivy, Semgrep, and Gitleaks findings for AI agents34 versions - Latest release: 2 days ago - 133 downloads last month - 139 stars on GitHub - 1 maintainer
skill-firewall 0.4.2
Scan AI agent skills (SKILL.md) for prompt injection and malicious instructions before your agent...9 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
@bergabruh/code-scanner 0.1.1
MCP server package for consent-gated workspace security scanning.2 versions - Latest release: about 2 months ago - 13 downloads last month - 0 stars on GitHub - 1 maintainer
@i.akb-viora/codevet 1.0.0 removed
Vet your code before it ships — a free, open-source security co-pilot that checks for leaked secr...1 version - Latest release: about 2 months ago - 102 downloads last month - 1 stars on GitHub - 1 maintainer
obsidiansec 1.4.1
ObsidianSec - DevSecOps Platform & Defense Encyclopedia10 versions - Latest release: about 2 months ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
codevet-cli 1.2.0
Vet your code before it ships — a free, open-source security co-pilot that checks for leaked secr...3 versions - Latest release: about 1 month ago - 287 downloads last month - 1 stars on GitHub - 1 maintainer
@thkimsw98/slopscan 0.1.2
Free offline CLI that scans your local repo for hardcoded secrets and risky AI-generated code bef...3 versions - Latest release: about 2 months ago - 1 maintainer
vulnradar 0.1.1
Run a VulnRadar scan from the command line and gate CI on the findings.3 versions - Latest release: about 2 months ago - 25 downloads last month - 8 stars on GitHub - 1 maintainer
@nahom_a/vibecheck 0.1.0
Security scanner for AI-generated ("vibe-coded") apps1 version - Latest release: about 2 months ago - 7 downloads last month - 0 stars on GitHub - 1 maintainer
ai-security-skill 0.1.1
Open-source security control layer for AI coding agents.2 versions - Latest release: about 2 months ago - 297 downloads last month - 0 stars on GitHub - 1 maintainer
authzscan 0.2.0
Autonomous IDOR/BOLA (broken access control) review for Next.js App Router repos, driven by Claud...3 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
vigilnz 0.0.3
Vigilnz security scanner CLI — thin installer/wrapper that downloads and runs the native Vigilnz ...3 versions - Latest release: about 1 month ago - 379 downloads last month - 1 maintainer
@devseccode/scanner-darwin-arm64 0.5.0
Packaged DevSecCode Core backend artifact for darwin-arm64. Installed automatically by @devseccod...6 versions - Latest release: about 2 months ago - 62 downloads last month - 3 stars on GitHub - 2 maintainers
@devseccode/scanner-linux-x64 0.5.0
Packaged DevSecCode Core backend artifact for linux-x64 (glibc). Installed automatically by @devs...6 versions - Latest release: about 2 months ago - 3 stars on GitHub - 2 maintainers
@devseccode/scanner 0.5.0
Gamified local security CLI for hunting common code vulnerabilities from npm.6 versions - Latest release: about 2 months ago - 57 downloads last month - 3 stars on GitHub - 2 maintainers
@devseccode/scanner-linux-arm64 0.5.0
Packaged DevSecCode Core backend artifact for linux-arm64 (glibc). Installed automatically by @de...6 versions - Latest release: about 2 months ago - 17 downloads last month - 3 stars on GitHub - 2 maintainers
@devseccode/scanner-win32-x64 0.5.0
Packaged DevSecCode Core backend artifact for win32-x64. Installed automatically by @devseccode/s...6 versions - Latest release: about 2 months ago - 58 downloads last month - 3 stars on GitHub - 2 maintainers
patchproof-repro 0.1.0
Deterministic exploit repro + AI patch verification engine (npm wrapper for the Python CLI).1 version - Latest release: about 2 months ago - 1 stars on GitHub - 1 maintainer
micro-sec-audit 1.0.1
Zero-backend security scanner with an interactive dashboard2 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
xploitscan 1.18.10 💰
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.83 versions - Latest release: about 19 hours ago - 5.39 thousand downloads last month - 1 maintainer
pentest-bot 0.1.0
Ferramenta CLI gratuita e multi-linguagem para análise de vulnerabilidades de segurança em código...1 version - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
aegilabs 0.3.2 deprecated
AegiLabs security audit agent — runs locally, metered via your AegiLabs key.5 versions - Latest release: about 1 month ago - 304 downloads last month - 1 maintainer
ai-appsec 0.1.0
Audit AI applications and agents for security risks before commit, PR, merge, or deployment. Dete...4 versions - Latest release: 2 months ago - 4 stars on GitHub - 1 maintainer
@brdndon/secure-mcp 2.0.0
Local MCP server for structured, agent-first security audits of TypeScript/Next.js and Swift/Swif...2 versions - Latest release: 2 months ago - 93 downloads last month - 1 stars on GitHub - 1 maintainer
@securstack/dsh-plugin 0.1.2
DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSO...3 versions - Latest release: 2 months ago - 2 stars on GitHub - 1 maintainer
@onamfc/security-scanner 1.0.0 💰
Enterprise-grade CLI security scanner for detecting secrets and vulnerabilities in codebases1 version - Latest release: 11 months ago - 16 downloads last month - 3 stars on GitHub - 1 maintainer
@patchlight/cli 0.1.0
Interactive Patchlight CLI — local security scanning and code review in your terminal, with strea...1 version - Latest release: 2 months ago - 1 maintainer
skilltotal 0.79.0
Static security scanner for MCP servers, agent skills and npm/PyPI packages. Runs the skilltotal ...26 versions - Latest release: about 22 hours ago - 2.38 thousand downloads last month - 14 stars on GitHub - 1 maintainer
@hallaxius/deepsec 0.0.2 removed
AI-powered vulnerability scanner for any codebase — fork of vercel-labs/deepsec with bun support,...2 versions - Latest release: 2 months ago - 1 maintainer
@rn-security/cli 0.1.0
Command-line interface for the React Native Security Toolkit: static security audits, secret scan...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
ai-compliance-ops 0.1.0
Developer-first scanner for AI stack situational awareness: detects sanctioned dependencies, comm...1 version - Latest release: 2 months ago - 1 maintainer
@rn-security/mcp 0.1.0
Model Context Protocol server for the React Native Security Toolkit: exposes deterministic securi...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@rn-security/auditor 0.1.0
Static application security analysis for React Native projects: file discovery, rule engine, find...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
moneypath 0.2.0
Static analyzer that finds payment logic flaws in Razorpay, Stripe and Cashfree checkouts — clien...3 versions - Latest release: 2 months ago - 20 downloads last month - 0 stars on GitHub - 1 maintainer
reporook 0.9.3
Free, deterministic, agent-agnostic security scanner for repositories.9 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@reporook/service 0.9.3
Local no-code security dashboard with guided repository-only GitHub App publishing.4 versions - Latest release: 2 months ago - 424 downloads last month - 0 stars on GitHub - 1 maintainer
@reporook/mcp-server 0.9.3
MCP tools for RepoRook scanning, team policy, approval-bound remediation, and verification.9 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@kevyn-castelo/vibeaudit 0.1.0
Agent skills (SKILL.md) that find and fix the five security failures AI-generated code leaves beh...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@siliconvalleyglobal/slopguard 0.1.1
Real-time AI package hallucination and slopsquatting defense for AI coding agents2 versions - Latest release: 2 months ago - 27 downloads last month - 0 stars on GitHub - 3 maintainers
@mondoohq/xgrep 0.88.0
A fast, Semgrep-compatible code scanner written in Go.86 versions - Latest release: 1 day ago - 13.5 thousand downloads last month - 1 maintainer
@saglitz/security-core 0.3.0 deprecated
Parser-free core library carrying SaglitzSecure's finding model, its 15-rule engine and the JSON/...2 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
saglitzsecure 0.5.0
Static security scanner that needs no parser: web/backend source and Apple platform configuration...4 versions - Latest release: 2 months ago - 766 downloads last month - 0 stars on GitHub - 1 maintainer
dsh-secure-review 0.1.0 deprecated
DSH AI 代码安全审查插件:secure_scan/secure_diff/secure_fix_verify/secure_report/secure_export/secure_poli...1 version - Latest release: 2 months ago - 2 stars on GitHub - 1 maintainer
sinktrace 0.1.0
Finds what your AI agent's tools can be tricked into doing — then proves it by running the exploi...1 version - Latest release: 2 months ago - 1 maintainer
security-hub 0.7.1
Open-source SAST scanner CLI for Node.js/Express and Next.js apps — catches SQL injection, XSS, c...9 versions - Latest release: 1 day ago - 894 downloads last month - 0 stars on GitHub - 1 maintainer
security-hub-scanner 0.7.1
Tree-sitter based SAST engine for Node.js/Express and Next.js apps: SQL injection, XSS, command i...9 versions - Latest release: 1 day ago - 1.08 thousand downloads last month - 0 stars on GitHub - 1 maintainer
getdev 0.1.8 💰
verify, secure, and ship AI-generated code — one binary, runs locally, nothing leaves your machine10 versions - Latest release: 2 months ago - 1.36 thousand downloads last month - 1 stars on GitHub - 1 maintainer
orion-security-cli 0.4.1
Software assurance & security audit platform. 360° interactive CLI suite, cross-file AST taint, V...4 versions - Latest release: 2 months ago - 0 downloads last month - 1 maintainer
@oversecured/mcp 0.1.0-beta.5
Oversecured MCP server for mobile application security scans1 version - Latest release: 2 months ago - 3 maintainers
@oversecured/cli 0.1.0-beta.4
Oversecured CLI — start mobile app security scans and fetch reports/findings from CI/CD pipelines...6 versions - Latest release: 3 months ago - 3 maintainers
@guardbee/mcp-prompt-injection-scanner 0.2.21
MCP server that scans documents, scraped pages, and RAG content for indirect prompt injection pay...26 versions - Latest release: 1 day ago - 3.13 thousand downloads last month - 1 stars on GitHub - 1 maintainer
@vidhaankhare/vibeguard 2.0.2
Gemini-powered security auditor for AI-generated code. Scans a folder and writes a Markdown vulne...4 versions - Latest release: 2 months ago - 29 downloads last month - 2 stars on GitHub - 1 maintainer
canopii 0.2.0
MCP server security scanner — the open-source engine behind the Canopii Trust Index2 versions - Latest release: 2 months ago - 24 downloads last month - 2 stars on GitHub - 1 maintainer
jokalala-cli 0.2.22
Jokalala Static Code Analyzer - Enterprise-grade security scanning CLI23 versions - Latest release: 2 months ago - 3.05 thousand downloads last month - 1 maintainer
@hookwarden/github-action 0.1.0
GitHub Action wrapper for hookwarden CLI.2 versions - Latest release: 6 months ago - 23 downloads last month - 1 stars on GitHub - 1 maintainer
@hookwarden/fix 0.12.0
hookwarden auto-remediation — mechanical AST rewrites for the safe-codegen rule subset (timing-un...23 versions - Latest release: 12 days ago - 508 downloads last month - 1 stars on GitHub - 1 maintainer
provekit 0.1.0
Attack-tested security scanning for AI-generated code. Catches leaked secrets and the insecure pa...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
hookwarden 0.12.0
Webhook security audit CLI — finds signature-verification bugs in JavaScript, TypeScript, Python,...33 versions - Latest release: 12 days ago - 735 downloads last month - 1 stars on GitHub - 1 maintainer
@yagyeshvyas/vibeguard 1.3.0 💰
Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 ...7 versions - Latest release: 3 months ago - 1.2 thousand downloads last month - 7 stars on GitHub - 1 maintainer
dsh-code-security 0.5.1
对代码与 Git 改动进行本地静态安全检查,并追踪修复结果。14 versions - Latest release: 1 day ago - 2.65 thousand downloads last month - 2 stars on GitHub - 1 maintainer
claude-skill-guard 1.1.5
A security scanner for Claude Skills6 versions - Latest release: 2 months ago - 48 downloads last month - 0 stars on GitHub - 1 maintainer
@hookwarden/engine 0.12.0
hookwarden audit engine — handler discovery, reachability analysis, and evidence collection for w...32 versions - Latest release: 12 days ago - 578 downloads last month - 1 stars on GitHub - 1 maintainer
@hookwarden/mcp 0.9.5
Model Context Protocol server for hookwarden — exposes the scan_handler tool so AI coding agents ...19 versions - Latest release: 12 days ago - 246 downloads last month - 1 stars on GitHub - 1 maintainer
@lowdep/depwarden 1.0.8 💰
DepWarden CLI — scan your npm/yarn/pnpm project for supply chain vulnerabilities7 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
@hookwarden/rules 0.12.0
hookwarden detection rule pack — 270 webhook signature-verification rules across 27 providers (St...32 versions - Latest release: 12 days ago - 429 downloads last month - 1 stars on GitHub - 1 maintainer
@lapointelabs/tripwire 0.1.0
Security scan for Claude Code, Cursor, and coding agents — injection sinks, secrets, prompt-injec...3 versions - Latest release: 3 months ago - 25 downloads last month - 0 stars on GitHub - 1 maintainer
mcp-tenant-isolation 2.0.0
Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic ...3 versions - Latest release: 2 months ago - 12 thousand downloads last month - 4 stars on GitHub - 1 maintainer
@dointhai/owlwarden-core-native-linux-x64-gnu 1.3.0
Prebuilt Rust engine for owlwarden. Install `owlwarden` instead — this package is not useful on i...10 versions - Latest release: about 2 months ago - 58 downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-core-native-win32-x64-msvc 1.3.0
Prebuilt Rust engine for owlwarden. Install `owlwarden` instead — this package is not useful on i...10 versions - Latest release: about 2 months ago - 1.18 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-core-native-darwin-x64 1.3.0
Prebuilt Rust engine for owlwarden. Install `owlwarden` instead — this package is not useful on i...10 versions - Latest release: about 2 months ago - 1.17 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-sdk 1.3.0 💰
Types and zod schemas for owlwarden reports, rules, and coverage. Install `owlwarden` to run the ...10 versions - Latest release: about 2 months ago - 57 downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-config 1.3.0 💰
Config schema and resolver for owlwarden. Install `owlwarden` to run the scanner.10 versions - Latest release: about 2 months ago - 58 downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-core-native-linux-arm64-gnu 1.3.0
Prebuilt Rust engine for owlwarden. Install `owlwarden` instead — this package is not useful on i...10 versions - Latest release: about 2 months ago - 60 downloads last month - 0 stars on GitHub - 1 maintainer
@dointhai/owlwarden-core-native 1.3.0 💰
Prebuilt Rust engine for owlwarden. Install `owlwarden` instead — this package is not useful on i...10 versions - Latest release: about 2 months ago - 1.25 thousand downloads last month - 0 stars on GitHub - 1 maintainer
codex-security-momu 0.1.3
面向自定义 OpenAI 兼容 Provider 的交互式 AI 安全代码扫描 CLI4 versions - Latest release: 3 months ago - 49 downloads last month - 0 stars on GitHub - 1 maintainer
owlwarden 1.3.0 💰
Offline security scanner for Node web apps and AI coding agents. OWASP rules with framework-speci...10 versions - Latest release: about 2 months ago - 1.19 thousand downloads last month - 0 stars on GitHub - 1 maintainer
Related Keywords
security
549
static-analysis
262
cli
204
devsecops
197
scanner
189
mcp
180
owasp
175
typescript
155
vulnerability
146
ai-security
113
ai
101
appsec
98
sarif
95
vulnerability-scanner
94
nodejs
90
audit
86
code-quality
78
claude
78
javascript
77
model-context-protocol
77
claude-code
76
security-scanner
75
cursor
75
linter
75
secrets
71
cwe
61
ai-agents
60
semgrep
57
supply-chain-security
56
llm
56
security-tools
56
prompt-injection
56
nextjs
52
sca
51
code-review
49
mcp-server
48
dast
46
eslint
45
developer-tools
44
secure-coding
44
linting
43
security-audit
42
codex
42
eslint-plugin
42
supply-chain
42
a11y
41
oxlint
41
compliance
40
vibe-coding
40
llm-security
39
taint-analysis
37
eslintplugin
35
code-analysis
34
ast
34
rust
33
sbom
33
python
32
agent-security
32
sql-injection
31
github-actions
31
ci
31
llm-optimized
31
ai-agent
30
ai-assistant
30
cybersecurity
29
xss
28
vulnerabilities
27
gitleaks
27
supabase
25
mcp-security
25
cve
25
interlace-security
24
express
23
npm
22
osv
22
anthropic
22
code-security
22
secrets-detection
21
windsurf
21
gdpr
20
pentest
20
web-security
20
ci-cd
19
agent
19
gemini
19
secret-detection
18
vulnerability-detection
18
penetration-testing
17
openai
17
code-scanning
16
auto-fix
16
skills
15
fastify
15
nodesecure
15
go
15
nestjs
15
agents
15
sql
15
java
15
ollama
14