Alle Tags
Katalog-Tag

#sca

Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.

21 Einträge
Getaggt als „sca“Geordnet nach Gesundheitsindex
Maven · npm
94AußergewöhnlichGesundheitsindex
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Kotlin★ 2.05117. Juli 2026
Apache-2.017. Juli 2026 · Metriken 2.10.0
PyPI
93AußergewöhnlichGesundheitsindex
SocketDev/socket-python-cli
Socket Python CLI to use in integrations
Python★ 9↓ 183.3K/Monat21. Juli 2026
MIT21. Juli 2026 · Metriken 2.10.0
npm · Maven · NuGet +1
92ExzellentGesundheitsindex
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
JavaScript★ 1.018↓ 745.3K/Monat28. Juli 2026
Apache-2.028. Juli 2026 · Metriken 2.10.0
PyPI
90ExzellentGesundheitsindex
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Python★ 11317. Juli 2026
Apache-2.017. Juli 2026 · Metriken 2.10.0
RubyGems
89ExzellentGesundheitsindex
pay-rails/pay
Payments for Ruby on Rails apps
Ruby★ 2.24930. Juli 2026
MIT30. Juli 2026 · Metriken 2.10.0
PyPI
88ExzellentGesundheitsindex
cycodehq/cycode-cli
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
Python★ 99↓ 127.9K/Monat27. Juli 2026
MIT27. Juli 2026 · Metriken 2.10.0
PyPI
86ExzellentGesundheitsindex
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Python · C · Shell★ 2.58321. Juli 2026
Eigene Lizenz21. Juli 2026 · Metriken 2.10.0
Go · PyPI
86ExzellentGesundheitsindex
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Go★ 917. Juli 2026
Apache-2.017. Juli 2026 · Metriken 2.10.0
Maven · npm
86ExzellentGesundheitsindex
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Kotlin · TypeScript★ 6615. Juli 2026
Apache-2.015. Juli 2026 · Metriken 2.10.0
PyPI · npm
84ExzellentGesundheitsindex
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Python★ 1.281↓ 10.9K/Monat24. Aug. 2026
MIT24. Aug. 2026 · Metriken 2.10.0
Packagist
81ExzellentGesundheitsindex
Sylius/StripePlugin
Sylius ^2.0 plugin to support Stripe Checkout and Stripe Web Elements
PHP★ 12↓ 17.5K/Monat5. Sept. 2026
MIT5. Sept. 2026 · Metriken 2.10.0
NuGet
81ExzellentGesundheitsindex
package-url/packageurl-dotnet
.NET parser for Package URLs (ECMA-427)
C#★ 1718. Juli 2026
MIT18. Juli 2026 · Metriken 2.10.0
Packagist
80ExzellentGesundheitsindex
Sylius/PayumStripePlugin
Sylius Payum Stripe gateway plugin (with SCA support)
PHP · Gherkin★ 61↓ 2.134/Monat5. Sept. 2026
MIT5. Sept. 2026 · Metriken 2.10.0
Go
77GutGesundheitsindex
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Go★ 019. Juli 2026
Apache-2.019. Juli 2026 · Metriken 2.10.0
Go · npm · PyPI
75GutGesundheitsindex
KKloudTarus/synapse-ce
Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.
Go · Python★ 336. Aug. 2026
Apache-2.06. Aug. 2026 · Metriken 2.10.0
Go
71GutGesundheitsindex
Vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Go · Open Policy Agent★ 255. Sept. 2026
Eigene Lizenz5. Sept. 2026 · Metriken 2.10.0
npm
69GutGesundheitsindex
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
TypeScript · JavaScript★ 1↓ 4.203/Monat20. Juli 2026
MIT20. Juli 2026 · Metriken 2.10.0
63MittelGesundheitsindex
tonycknight/pkgchk-cli
A dotnet tool for package dependency checks.
F#★ 31. Aug. 2026
MIT1. Aug. 2026 · Metriken 2.10.0
Go · npm
62MittelGesundheitsindex
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
Go★ 319. Juli 2026
MIT19. Juli 2026 · Metriken 2.10.0
npm
14KritischGesundheitsindex
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
JavaScript★ 1122. Juli 2026
MIT22. Juli 2026 · Metriken 2.10.0