Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerabilities
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
15 records
Go · npm
anchore/scan-action
Anchore container analysis and scan provided as a GitHub Action
MITJul 26, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Jul 17, 2026 · metrics 2.10.0
PyPI
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITAug 20, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
guacsec/trustify
SBOM analysis platform for storing, correlating, and querying software bill of materials and security advisories (CSAF/VEX, OSV, CVE) at scale.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go · Maven
seqra/seqra
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
npm
lirantal/is-website-vulnerable
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
Apache-2.0Aug 2, 2026 · metrics 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MITSep 5, 2026 · metrics 2.10.0
npm
michaelpipkin/dependabot-agent
No repository description published.
MITJul 27, 2026 · metrics 2.10.0
PyPI · RubyGems
google/clusterfuzz
Scalable fuzzing infrastructure.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
FuzzingLabs/secpipe
MCP server for AI-driven security pipelines
Custom licenseAug 4, 2026 · metrics 2.10.0
RubyGems
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
Custom licenseAug 28, 2026 · metrics 2.10.0