NodeSecure / js-x-rayLinks
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
☆252Updated this week
Alternatives and similar repositories for js-x-ray
Users that are interested in js-x-ray are comparing it to the libraries listed below
Sorting:
- Mitigate security concerns of Dependency Confusion supply chain security risks☆47Updated 2 years ago
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆402Updated 7 months ago
- ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!☆35Updated this week
- Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).☆30Updated this week
- JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.☆374Updated this week
- TC39 proposal for mitigating prototype pollution☆47Updated last year
- 🌍 Normalized repository URLs for every package in the npm registry. Updated daily.☆89Updated 2 weeks ago
- A curated list of awesome browser security learning material.☆140Updated 2 years ago
- Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration☆295Updated this week
- Collection of community-driven CodeQL query, library and extension packs☆168Updated this week
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆314Updated this week
- Find security vulnerabilities in open source npm packages while you code☆207Updated 3 years ago
- Collection of security best practices for package managers.☆162Updated 2 years ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆120Updated last week
- Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git☆94Updated last week
- An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.☆211Updated last week
- Manager of third-party sources of Semgrep rules 🗂☆87Updated 11 months ago
- get popular npm packages☆39Updated 3 months ago
- NodeJS runtime protection for supply chain attacks☆141Updated 2 years ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆120Updated 4 months ago
- How GitHub Actions workflows can be hacked☆157Updated 10 months ago
- Coverage-guided, in-process fuzzing for Node.js☆306Updated this week
- Generic SAST Library☆131Updated last week
- A Node.js vulnerability finding tool.☆95Updated 4 years ago
- A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.☆57Updated 3 weeks ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆145Updated last year
- Scans your Github Actions for security issues☆74Updated this week
- Test Case Generator Based on Branch Coverage and Fuzzing☆36Updated last year
- Dependency Combobulator☆93Updated last year
- Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]☆42Updated last year