0sec-labs / 0
The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.
- Stars
- 1,305 stars
- Forks
- 170 forks
- Language
- TypeScript
- License
- OTHER
- Created
- Aug 19, 2026
- Last push
- Nov 10, 2026
- Updated
- Nov 11, 2026
Why these Tags: an agent read the README and quoted it
- Vulnerability scanner from the readme:
It checks pull requests with deterministic scanning and AI agents
- Penetration testing from the description:
Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing
- Code review tool from the readme:
It checks pull requests with deterministic scanning and AI agents, runs targeted tests in a sandbox, and posts findings with evidence and suggested fixes.
- MCP server from the readme:
Use CLI commands or expose workflows through MCP:
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 10, 2026: +504 stars in 7 days.
Star History
84 days recorded, Aug 20, 2026 – Nov 11, 2026 (UTC). Net change +1,316 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/0sec-labs/0) Badge
[](https://awesomerepos.com/0sec-labs/0) Timeline
It gained stars on 59 of the 84 days recorded since Aug 20, 2026.
Its largest 7 days were Nov 5, 2026 to Nov 11, 2026: 721 stars.
In the 30 days to Nov 11, 2026 it got 810 stars, 88% more than in the 30 days before.
- Created on the Repository Host
- Reached 100 stars, 41 days after it was created
- +239 stars in one day
- Reached 500 stars, 61 days after it was created
- +228 stars in one day
- Reached 1,000 stars, 82 days after it was created
- Largest star day recorded: +322 stars, the same day as release v0.28.9
- Release v0.28.9
- Release v0.28.8
- Release v0.28.7
- Release v0.28.6
- Entered the Repository Index: +504 stars in 7 days
- Release v0.28.10
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 11, 2026 – Nov 12, 2026. Forks +11. AwesomeRepos saw a new push on 0 of 1 days.
- Nov 12, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos last read these facts from GitHub on Nov 12, 2026. How AwesomeRepos defines each check
Copies a prompt for a coding agent. It has 2 tasks for the maintainers of 0sec-labs/0.
Improve the Health Facts of the GitHub repository 0sec-labs/0. AwesomeRepos measures facts about how a repository is maintained, released, secured, and documented. Its page for this repository is https://awesomerepos.com/0sec-labs/0. A change to the repository can improve each of the 2 items below. Each item gives the measured fact or score, and a task. 1. A changelog file at the root Fact: No changelog file at the root (GitHub, 2026-11-12). Rule: The root of the default branch has a file named CHANGELOG, CHANGES, HISTORY, NEWS, RELEASE, or RELEASES, with no extension or with .md, .markdown, .rst, .txt, or .adoc. Release notes on GitHub releases do not count. Task: Add CHANGELOG.md at the root of the default branch. Write one section for each published release, newest first, from the GitHub releases, the Git tags, and the commit history. Do not invent changes. If the project uses a release tool (for example Changesets, release-please, or semantic-release), configure it to update this file for each release. 2. A code of conduct Fact: GitHub finds no code of conduct (GitHub, 2026-11-12). Rule: GitHub finds a code of conduct in the repository or in the owner's .github repository. Task: Add CODE_OF_CONDUCT.md at the root with the Contributor Covenant 2.1 text. Change only the contact method. Ask me for the contact; do not invent one. Rules for this work: - Each file must be true for this project. Do not copy text that does not apply to it. - Do not choose a licence, a contact, or a release version for me. Ask me. - Do not publish a release, change a repository setting, or push to the default branch. Make the changes on a new branch. - Keep each change small, and run the checks of this repository before you finish. - At the end, list each item as DONE, SKIPPED (with the reason), or NEEDS A DECISION (with the question). AwesomeRepos reads these facts again in its next scan. The definitions of the checks: https://awesomerepos.com/health-facts
Maintenance
3 of 4 checks-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-10, 1 day ago. Source
-
Yes: Commits in the last 13 weeks
1614 commits on the default branch in the last 13 weeks (GitHub, 2026-11-12). Source
-
No: Commits in 26 or more of the last 52 weeks
Commits in 25 of the last 52 weeks (GitHub, 2026-11-12). Source
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 9
- 63
- 12
- 43
- 39
- 55
- 41
- 84
- 51
- 26
- 68
- 47
- 66
- 292
- 94
- 16
- 273
- 188
- 118
- 117
- 46
- 12
- 122
- 48
- 222
Releases
2 of 3 checks-
Yes: A release in the last 365 days
Newest release v0.28.10 on 2026-11-10, 1 day ago. 10 or more releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is v0.28.10. Source
-
No: A changelog file at the root
No changelog file at the root (GitHub, 2026-11-12).
Security practice
1 of 1 check-
Yes: A security policy
GitHub finds a security policy (GitHub, 2026-11-12). Source
OpenSSF Scorecard has no result for this repository from the last 90 days.
Community files
2 of 3 checksDependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 309 direct packages (scanned on Nov 12, 2026). Packages from 58 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 58
-
npm: @deepseek-ai/cordis
- react/react 253K
npm: react, react-dom
- openai/codex 135K
npm: @openai/codex
- microsoft/TypeScript 112K
npm: typescript
-
npm: @google/gemini-cli
- microsoft/playwright 100K
npm: playwright
-
PyPI: pyghidra
-
npm: @tailwindcss/vite, tailwindcss
-
npm: mermaid
- vitejs/vite 84K
npm: vite
Show all 58
-
npm: express
- withastro/astro 64K
npm: @astrojs/markdown-remark, astro
-
npm: react-router-dom
-
npm: @types/express, @types/node, @types/pdfkit, @types/react and 1 more
- astral-sh/ruff 51K
PyPI: ruff
- TanStack/query 51K
npm: @tanstack/react-query
- colinhacks/zod 44K
npm: zod
- evanw/esbuild 40K
npm: esbuild
-
npm: drizzle-orm
- lovell/sharp 33K
npm: sharp
-
PyPI: openai
- tj/commander.js 28K
npm: commander
- vercel/ai 28K
npm: @ai-sdk/gateway, ai
-
npm: web-tree-sitter
-
npm: lucide-react
-
npm: highlight.js
-
PyPI: mcp
- chalk/chalk 23K
npm: chalk
- websockets/ws 23K
npm: ws
- python/mypy 21K
PyPI: mypy
-
npm: @radix-ui/react-dialog, @radix-ui/react-scroll-area, @radix-ui/react-select, @radix-ui/react-separator and 3 more
-
npm: @dnd-kit/core, @dnd-kit/sortable, @dnd-kit/utilities
-
npm: vitest
- PyO3/pyo3 16K
Cargo: pyo3, pyo3-build-config, pyo3-ffi, pyo3-macros and 1 more
-
npm: react-markdown
-
PyPI: pytest
-
PyPI: pwntools
-
npm: @opentui/core, @opentui/react
-
npm: @modelcontextprotocol/sdk
-
Cargo: windows-link, windows-sys
-
npm: tsx
- serde-rs/serde 11K
Cargo: serde, serde_core, serde_derive
- foliojs/pdfkit 11K
npm: pdfkit
- lukeed/clsx 9.8K
npm: clsx
- withastro/starlight 9.5K
npm: @astrojs/starlight
- angr/angr 9.4K
PyPI: angr
-
GitHub Actions: actions/checkout
- panva/jose 7.9K
npm: jose
- joe-bell/cva 6.9K
npm: class-variance-authority
- lief-project/LIEF 5.7K
PyPI: lief
-
PyPI: jsonschema
- RustCrypto/hashes 2.3K
Cargo: sha2
- hardbyte/python-can 1.6K
PyPI: python-can
-
Cargo: p256, p384, p521, primeorder
-
Cargo: fiat-crypto
-
Cargo: ecdsa, ed25519, rfc6979
-
npm: string-width
-
Cargo: base16ct, base64ct, const-oid, der and 5 more
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 12, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 12, 2026: 1,305 stars, 170 forks, last push Nov 10, 2026, not archived. One of 2 Observations since Nov 11, 2026.