NodeSecure/cli

Command-line interface for socket.dev security analysis

nodejsscan is a static security code scanner for Node.js applications.

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

A simple project to detect the Shai-Hulud npm supply chain attack

Protect against malicious open source packages 🤖

Lint an npm or yarn lockfile to analyze and detect security issues