NodeSecure / js-x-rayLinks
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns π¬.
β262Updated last week
Alternatives and similar repositories for js-x-ray
Users that are interested in js-x-ray are comparing it to the libraries listed below
Sorting:
- Mitigate security concerns of Dependency Confusion supply chain security risksβ50Updated 6 months ago
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.β420Updated last year
- Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).β30Updated last week
- π Normalized repository URLs for every package in the npm registry. Updated daily.β95Updated this week
- β‘οΈ A package API to run a static analysis of your module's dependencies. This is the CLI engine!β36Updated this week
- Find security vulnerabilities in open source npm packages while you codeβ211Updated 3 years ago
- NodeJS runtime protection for supply chain attacksβ142Updated 3 years ago
- Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registrationβ302Updated last week
- Coverage-guided, in-process fuzzing for Node.jsβ324Updated last month
- Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.β334Updated last year
- JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.β379Updated this week
- β145Updated 3 years ago
- Overlay is a browser extension helping developers evaluate open source packages before picking themβ225Updated 6 months ago
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules πβ92Updated last week
- A curated list of awesome browser security learning material.β144Updated 3 years ago
- A zoo for malicious NPM packagesβ20Updated 3 years ago
- π€ A list of all the public package names on npm. Updated daily.β285Updated this week
- A comprehensive list of software composition analysis tools.β159Updated 2 months ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)β61Updated 8 months ago
- Secure DOM trees isolation and encapsulation leveraging ShadowDOMβ36Updated 10 months ago
- Hands-on practical use of HTTP security headers as browser security controls to help secure web applicationsβ18Updated 2 years ago
- Easy auditing & sandboxing for your JavaScript dependencies πͺ±β253Updated 2 years ago
- Snyk Node Runtime Agentβ16Updated 3 years ago
- A curated list of awesome GraphQL Security frameworks, libraries, software and resourcesβ345Updated last year
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and versβ¦β133Updated 2 weeks ago
- A Node.js vulnerability finding tool.β96Updated 4 months ago
- Use Snow to finally secure your web app's same origin realms!β115Updated 8 months ago
- TC39 proposal for mitigating prototype pollutionβ52Updated 2 years ago
- Collection of security best practices for package managers.β164Updated 3 years ago
- Scans your Github Actions for security issuesβ88Updated last month