npm
calllint/calllint
Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent runs them.
Apache-2.031 jul 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#sarif
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
47 registros
Go
rudrendupaul/tenantguard
CLI security scanner for self-hosted multi-tenant AI-agent platforms. 16 fail-closed OPA/Rego rules catch tenant-isolation defects (sandbox scoping, SSRF, cross-tenant cron/auth, secret leakage). SARIF and JSON output for CI.
Apache-2.015 jul 2026 · métricas 2.10.0
Go
skyway-harness-builder/workflow-lint
Standalone open-source linter for Skylence .sky workflow files
Apache-2.021 jul 2026 · métricas 2.10.0
Go
kidoz/vulners-cli
CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode
MIT17 jul 2026 · métricas 2.10.0
PyPI · crates.io · Maven +2
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Licencia propia17 jul 2026 · métricas 2.10.0
crates.io
tacticaldoll/tianheng
Reactive architectural governance for Rust — declare boundaries in Rust, react to drift in CI and at runtime. The 三儀: 圭表 (static) · 渾儀 (semantic) · 漏刻 (runtime). Govern by reaction, not instruction. On crates.io as the tianheng family.
Apache-2.029 jul 2026 · métricas 2.10.0
PyPI · npm · crates.io
JunHwan-Kwon/deepbom
Local static analysis and evidence generation for deployed AI model artifacts
Apache-2.04 sept 2026 · métricas 2.10.0
npm
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
MIT6 sept 2026 · métricas 2.10.0
Go
bunta-expert/git-path-audit
Read-only CLI that finds Git paths that collide, change meaning, or fail to check out across Windows, macOS, and Linux.
MIT5 sept 2026 · métricas 2.10.0
Packagist
phpcpd-next/phpcpd
phpcpd-next is a token-based copy/paste (clone) detector for PHP 8.5+, a modernized, openly-licensed successor to Sebastian Bergmann's phpcpd
BSD-3-Clause18 ago 2026 · métricas 2.10.0
npm
BenAHammond/code-auditor-mcp
Architectural invariants and code quality analysis, enforced inside your AI agent's edit loop. MCP server + CLI + Claude Code plugin. TypeScript, JavaScript, Go.
MIT26 jul 2026 · métricas 2.10.0
npm
criticaldeveloper/critical-gate
El repositorio no publica descripción.
MIT16 jul 2026 · métricas 2.10.0
Packagist
jbelien/phpstan-sarif-formatter
SARIF formatter for PHPStan
MIT29 jul 2026 · métricas 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MIT21 jul 2026 · métricas 2.10.0
npm
nsasoft/nsauditor-ai-agent-skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cursor, Windsurf, and any MCP-aware agent.
MIT6 sept 2026 · métricas 2.10.0
npm
KaraboGerald/SeamShieldCLI
SeamShield Community CLI: local-first access-lane scanning for AI-built apps
MIT4 ago 2026 · métricas 2.10.0
Go
tamish560/mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.
MIT20 jul 2026 · métricas 2.10.0