Alternatives and similar repositories for vulndb

Users that are interested in vulndb are comparing it to the libraries listed below

• golang / vuln
  [mirror] the database client and tools for the Go vulnerability database
  ☆433Updated 3 weeks ago
• github / codeql-go
  The CodeQL extractor and libraries for Go.
  ☆465Updated 2 years ago
• dgryski / semgrep-go
  Go rules for semgrep and go-ruleguard
  ☆480Updated 11 months ago
• google / go-flow-levee
  ☆194Updated 3 years ago
• google / safehtml
  Safe HTML for Go
  ☆373Updated 4 months ago
• aquasecurity / go-dep-parser
  Dependency Parser for Multiple Programming Languages
  ☆148Updated last year
• sonatype-nexus-community / nancy
  A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
  ☆600Updated last month
• google / licensecheck
  The licensecheck package classifies license files and heuristically determines how well they correspond to known open source licenses.
  ☆481Updated last year
• picatz / taint
  🚰 Static taint analysis for Go programs.
  ☆77Updated 2 months ago
• adonovan / spaghetti
  Spaghetti: a dependency analysis tool for Go packages
  ☆765Updated 2 years ago
• golang / govulncheck-action
  [mirror] GitHub action for govulncheck
  ☆124Updated 5 months ago
• quasilyte / go-ruleguard
  Define and run pattern-based custom linting rules.
  ☆856Updated last month
• Helcaraxan / gomod
  Go modules analysis tool
  ☆408Updated 3 years ago
• sqreen / go-agent
  Sqreen's Application Security Management for the Go language
  ☆210Updated 2 years ago
• CycloneDX / cyclonedx-gomod
  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
  ☆163Updated 3 weeks ago
• owenrumney / go-sarif
  Go library for SARIF - Static Analysis Results Interchange Format
  ☆80Updated last week
• google / go-licenses
  A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can…
  ☆952Updated last month
• AdaLogics / go-fuzz-headers
  ☆107Updated last year
• system-pclub / GCatch
  Statically Detecting Go Concurrency Bugs
  ☆439Updated 2 years ago
• rsc / rf
  A refactoring tool for Go
  ☆677Updated this week
• rogpeppe / go-internal
  Selected Go-internal packages factored out from the standard library
  ☆951Updated 6 months ago
• google / go-cmdtest
  This package simplifies testing of command-line interfaces.
  ☆180Updated 2 years ago
• inetaf / netaddr
  Network address types
  ☆722Updated 2 years ago
• google / licenseclassifier
  A License Classifier
  ☆337Updated 2 weeks ago
• tomarrell / wrapcheck
  A Go linter to check that errors from external packages are wrapped
  ☆352Updated 7 months ago
• praetorian-inc / gokart
  A static analysis tool for securing Go code
  ☆2,175Updated last year
• hashicorp / cap
  A collection of authentication Go packages related to OIDC, JWKs, Distributed Claims, LDAP
  ☆470Updated last month
• 0c34 / govwa
  ☆183Updated 8 months ago
• google / slowjam
  SlowJam: latency profiler for Go programs
  ☆252Updated 3 weeks ago
• google / capslock
  ☆1,050Updated this week