Alternatives and similar repositories for pypi-scan

Users that are interested in pypi-scan are comparing it to the libraries listed below

• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆130Updated 2 years ago
• jordan-wright / ossmalware
  ☆93Updated 3 years ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆78Updated last month
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆151Updated last year
• RogoLabs / cve.icu
  CVE.ICU code.
  ☆46Updated this week
• Phat3 / CVE-analyzer
  Extract useful semantic from CVE descriptions usinig NLP
  ☆25Updated 2 years ago
• RedHatProductSecurity / cvss
  CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
  ☆108Updated last month
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆122Updated 3 weeks ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆77Updated this week
• osssanitizer / osspolice
  Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
  ☆67Updated 7 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆28Updated 3 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆132Updated 2 months ago
• cve-search / CveXplore
  CveXplore
  ☆43Updated this week
• JordanMilne / Advocate
  An SSRF-preventing wrapper around Python's requests library. Advocate is no longer maintained, please fork and rename if you would like t…
  ☆95Updated 2 years ago
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated 2 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• fkie-cad / iva
  IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to sear…
  ☆67Updated 4 years ago
• Aurore54F / JaSt
  Syntactic detection of malicious (obfuscated) JavaScript files
  ☆83Updated 5 years ago
• rbortolameotti / decanter
  ☆16Updated 7 years ago
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆78Updated 9 months ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆96Updated 2 years ago
• joshbressers / cve-analysis
  Tools for conducting analysis of CVE data in Elasticsearch
  ☆74Updated last month
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆102Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆225Updated this week
• fuzzitdev / pythonfuzz
  coverage guided fuzz testing for python
  ☆226Updated 5 years ago
• blacktop / seccomp-gen
  Docker Secure Computing Profile Generator
  ☆48Updated 3 years ago
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆161Updated this week
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆71Updated 4 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆129Updated last month