NodeSecure/js-x-ray

JavaScript/TypeScript static analyzer for call graph construction, library usage pattern matching, and vulnerability exposure analysis

nodejsscan is a static security code scanner for Node.js applications.

一款用于快速打点JS文件及路径扫描的单兵工具 / A single player tool for quickly scanning JS files and paths

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

SonarSource Static Analyzer for JavaScript and TypeScript

Extract URLs, paths, secrets, and other interesting bits from JavaScript

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.