47,133 repositories indexed
1–9 of 9 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
A tool for quantitative risk analysis of Android applications based on machine learning techniques
Mitigate security concerns of Dependency Confusion supply chain security risks
Risk-adaptive development pipeline with adversarial consensus code review
Compile-time annotation processor for Spring Boot. Generates predictable REST APIs, DTOs, JSON Patch endpoints, and N+1 safe JPA repositories without runtime reflection.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.