cs-au-dk/jelly

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

nodejsscan is a static security code scanner for Node.js applications.

SonarSource Static Analyzer for JavaScript and TypeScript

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

All-in-one devtool to automatically analyze, search and visualize project modules and dependencies from JavaScript, TypeScript (JSX/TSX) and Node.js (ES6, CommonJS)

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.