Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerabilities
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
22 records
Go · npm
anchore/scan-action
Anchore container analysis and scan provided as a GitHub Action
MITSep 13, 2026 · metrics 2.10.0
Go
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
RetireJS/retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
guacsec/trustify
SBOM analysis platform for storing, correlating, and querying software bill of materials and security advisories (CSAF/VEX, OSV, CVE) at scale. Exposes a correlation graph of vuln :left_right_arrow: component :left_right_arrow: product :left_right_arrow: VEX
Apache-2.0Sep 10, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
githits-com/githits-cli
CLI & MCP for GitHits - The Code Context Layer for AI Coding Agents
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITOct 19, 2026 · metrics 2.10.0
npm
lirantal/is-website-vulnerable
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MITSep 5, 2026 · metrics 2.10.0
Packagist
jorijn/laravel-security-checker
Added Laravel functionality to Enlightn Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
MITOct 6, 2026 · metrics 2.10.0
—
andypitcher/ponytail-sec
The smallest change that ruins an attacker's day.
MITOct 18, 2026 · metrics 2.10.0
npm
michaelpipkin/dependabot-agent
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
PyPI
n132/ARVO
ARVO: an Atlas of Reproducible Vulnerabilities in Open source software.
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
PyPI · RubyGems
google/clusterfuzz
Scalable fuzzing infrastructure.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · Maven · PyPI
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
FuzzingLabs/secpipe
MCP server for AI-driven security pipelines
Custom licenseAug 4, 2026 · metrics 2.10.0
RubyGems
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
Custom licenseAug 28, 2026 · metrics 2.10.0