NodeSecure / js-x-ray
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
☆229Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for js-x-ray
- ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!☆28Updated last week
- JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.☆367Updated last week
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆375Updated last week
- A curated list of awesome browser security learning material.☆130Updated 2 years ago
- Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).☆30Updated 2 weeks ago
- Easy auditing & sandboxing for your JavaScript dependencies 🪱☆251Updated last year
- Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.☆320Updated 2 years ago
- A Node.js vulnerability finding tool.☆95Updated 4 years ago
- Collection of security best practices for package managers.☆159Updated 2 years ago
- 🌍 Normalized repository URLs for every package in the npm registry. Updated daily.☆78Updated this week
- Coverage-guided, in-process fuzzing for Node.js☆289Updated 5 months ago
- An extended Node.js runtime with additional security mechanisms built-in. Protects your Node.js applications from injection attacks such …☆31Updated 3 years ago
- TC39 proposal for mitigating prototype pollution☆44Updated last year
- Find security vulnerabilities in open source npm packages while you code☆202Updated 2 years ago
- Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]☆42Updated 4 months ago
- Secure DOM trees isolation and encapsulation leveraging ShadowDOM☆25Updated 3 weeks ago
- How GitHub Actions workflows can be hacked☆105Updated 2 months ago
- NodeJS runtime protection for supply chain attacks☆142Updated 2 years ago
- Snyk Node Runtime Agent☆16Updated 2 years ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers…☆98Updated this week
- ☆54Updated last year
- A zoo for malicious NPM packages☆20Updated last year
- Overlay is a browser extension helping developers evaluate open source packages before picking them☆222Updated 9 months ago
- Collection of community-driven CodeQL query, library and extension packs☆74Updated last week
- ESLint plugin to detect and stop Trojan Source attacks☆76Updated last year
- NodeSecure HTML & PDF report generator for any public and/or private git repositories.☆14Updated 3 weeks ago
- Hands-on practical use of HTTP security headers as browser security controls to help secure web applications☆18Updated last year
- Manager of third-party sources of Semgrep rules 🗂☆76Updated 3 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆98Updated 9 months ago
- A curated list of awesome GraphQL Security frameworks, libraries, software and resources☆299Updated 9 months ago