secret-detection — open-source software health

PyPI · crates.io

80Excellenthealth index

Fast Python static analysis powered by Rust. Detects dead code, security issues (including taint analysis), and code quality metrics like complexity, Halstead, maintainability, and nesting depth.

Rust★ 10↓ 2,184/moAug 18, 2026

Custom licenseAug 18, 2026 · metrics 2.10.0

npm · Go

73Goodhealth index

HodeTech/Leakwatch

High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.

Go★ 2↓ 46/moJul 27, 2026

MITJul 27, 2026 · metrics 2.10.0

npm

69Goodhealth index

goklab/guardvibe

Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.

TypeScript★ 4↓ 6,125/moJul 17, 2026

Apache-2.0Jul 17, 2026 · metrics 2.10.0

npm · Go

53Moderatehealth index

Hossiy21/razify

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

Go · TypeScript★ 21↓ 595/moAug 21, 2026

MITAug 21, 2026 · metrics 2.10.0

—

53Moderatehealth index

momenbasel/keyFinder

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

JavaScript · HTML · CSS★ 693Jul 27, 2026

MITJul 27, 2026 · metrics 2.10.0

51Moderatehealth index