All tags
Catalogue tag

#taint-analysis

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

10 records
Tagged “taint-analysis”Ranked by health index
Packagist
96Exceptionalhealth index
vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
PHP★ 5,897↓ 2.3M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Maven
77Goodhealth index
pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java and Android
Java★ 1,814Sep 14, 2026
LGPL-3.0Sep 14, 2026 · metrics 2.10.0
Go
75Goodhealth index
vyprai/vyql
Multi-language taint and graph security scanner. Follows tainted data through your code and shows why each finding is a finding.
C★ 8Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm · Go · PyPI
73Goodhealth index
antgroup/YASA-UAST
YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different programming languages into a unified abstract syntax format.
TypeScript · JavaScript★ 95↓ 1,134/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Hex · npm
73Goodhealth index
elixir-vibe/reach
Program dependence graph and architecture/code-flow analysis for BEAM projects
Elixir★ 191↓ 20.9K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
71Goodhealth index
HeadyZhang/agent-audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
Python★ 230↓ 3,609/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
63Moderatehealth index
trailofbits/polytracker
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
C++ · Python★ 599↓ 43/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
62Moderatehealth index
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
TypeScript★ 4↓ 17.9K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
50Moderatehealth index
wikimedia/mediawiki-tools-phan-SecurityCheckPlugin
Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing
PHP★ 27↓ 32.6K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Go · Maven · PyPI
34At Riskhealth index
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Kotlin · Go★ 157Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0