Packagist
vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
MIT20 oct 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#taint-analysis
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
10 registros
Maven
pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java and Android
LGPL-3.014 sept 2026 · métricas 2.10.0
Go
vyprai/vyql
Multi-language taint and graph security scanner. Follows tainted data through your code and shows why each finding is a finding.
Apache-2.018 oct 2026 · métricas 2.10.0
npm · Go · PyPI
antgroup/YASA-UAST
YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different programming languages into a unified abstract syntax format.
Sin licencia20 oct 2026 · métricas 2.10.0
Hex · npm
elixir-vibe/reach
Program dependence graph and architecture/code-flow analysis for BEAM projects
MIT9 sept 2026 · métricas 2.10.0
PyPI
HeadyZhang/agent-audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
MIT18 sept 2026 · métricas 2.10.0
PyPI
trailofbits/polytracker
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
Apache-2.011 sept 2026 · métricas 2.10.0
npm
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
MIT20 sept 2026 · métricas 2.10.0
Packagist
wikimedia/mediawiki-tools-phan-SecurityCheckPlugin
Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing
GPL-2.017 sept 2026 · métricas 2.10.0
Go · Maven · PyPI
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.010 sept 2026 · métricas 2.10.0