47,133 repositories indexed
1–16 of 16 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Reformats Java source code to comply with Google Java Style.
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
Protect against malicious open source packages 🤖
Compares two source sets and determines the appropriate semantic versioning to apply.
The ESLint plugin you definitely didn’t ask for.
A tool that allows you to analyse your Elm code, identify deficiencies and apply best practices.
Self-hosted artifact registry and pull-through cache in one binary. 17 formats: Docker/OCI, Maven, npm, PyPI, Cargo, Go, Raw, RubyGems, Terraform, Ansible Galaxy, NuGet, Pub, Conan, CPAN, RPM, Debian/APT, Hugging Face. No database, about 15 MB RAM idle, supply-chain curation built in.
Self-hosted artifact repository manager written in Rust. Hosts, proxies and groups 30+ formats: Docker/OCI, Maven, npm, PyPI, Cargo, Go, Helm, NuGet, Hugging Face, Terraform and more. PostgreSQL for metadata, blob stores on disk or S3. An open-source alternative to Nexus and Artifactory.
visual studio code extension simply view the image of the image variables when debugging python
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
Cyborg Whisperer (formerly lisply-mcp): the gaming-language upstream. Looking for the plain-language fork? github.com/genworks/lisply-mcp
QuickNotes is a plugin for [Microsoft PowerToys Run](https://github.com/microsoft/PowerToys) that allows you to quickly create, manage, and search notes directly from your PowerToys Run interface. Simply type `qq` followed by your note text to save it,
Protocol 390: To survive in People's Park, you must supply the prophet with change. Entry for 2013 GitHub Game Off.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.