Packagist
vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
MITAug 22, 2026 · metrics 2.10.0
All tags
Catalogue tag
#taint-analysis
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
7 records
npm · Go · PyPI
antgroup/YASA-UAST
YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different programming languages into a unified abstract syntax format.
No licenseAug 21, 2026 · metrics 2.10.0
Go · Maven
seqra/seqra
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Hex · npm
elixir-vibe/reach
Program dependence graph and architecture/code-flow analysis for BEAM projects
MITJul 17, 2026 · metrics 2.10.0
Maven
pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java and Android
LGPL-3.0Jul 30, 2026 · metrics 2.10.0
PyPI
trailofbits/polytracker
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-tools-phan-SecurityCheckPlugin
Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing
GPL-2.0Aug 7, 2026 · metrics 2.10.0