Tools
npq
lirantal/npq
A CLI that audits npm packages before installation, checking vulnerabilities, age, popularity, install scripts and provenance to reduce supply-chain risk.
Topics
Related projects
packj695Supply-chain security scanner that flags malicious and risky open-source dependencies via static and dynamic analysis.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
dependency-track4.4kA self-hosted software supply chain analysis platform that uses SBOMs to identify components and known vulnerabilities across projects, helping teams manage open-source dependency risk.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.