55,640 visible repositories in the index
1–15 of 15 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Chronos - A static race detector for the go language
An Elixir tool for checking safety of database migrations.
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications
Static analysis tool to prevent logging of sensitive data by detecting struct fields marked as sensitive.
Database smell detector
PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.