Keyword: vulnerability
- @vigolium/vigoliumReleased23h agoVersion0.1.41-beta
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
- cognium-devReleased3h agoVersion3.119.0
Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking
- trident-tuiReleased4h agoVersion0.10.1
Trident — AI penetration-testing agent. Run it with npx trident-tui ; it bootstraps everything and prompts for your API key.
- cognium-aiReleased4h agoVersion2.20.2
AI-powered static analysis CLI with LLM-enhanced vulnerability detection
- sast-skillsReleasedyesterdayVersion0.8.2
LLM SAST skills — turn your AI coding assistant into a SAST scanner for your codebase.
- arhus-cliReleased12h agoVersion0.3.8
local-first security analysis for TypeScript & JavaScript
- nsauditor-aiReleasedyesterdayVersion0.2.20
Modular AI-assisted network security audit platform — Community Edition
- @lockhawk/coreReleased5d agoVersion0.2.7
Scanning engine for lockhawk: lockfile parsing, OSV.dev vulnerability matching, CVSS v3/v4 scoring, and SARIF/JUnit/HTML reports
- lockhawkReleased5d agoVersion0.2.7
Fast, free, accurate npm dependency vulnerability scanner for local + CI/CD with an interactive HTML dashboard and SARIF/JUnit output, powered by OSV.dev
- pqc-checkReleased2d agoVersion1.3.1
Scan your codebase for quantum-vulnerable cryptography
- foxguardReleased1 week agoVersion0.9.0
A security scanner as fast as a linter, written in Rust. 170+ built-in rules across 10 languages.
- create-template-projectReleased16h agoVersion1.5.14
An ultra-modular, type-safe Node.js CLI tool used to scaffold new project templates (CLI, Webpage, Webapp, Fullstack) with best-practice configurations pre-installed.
- npm-guardian-mcpReleased5d agoVersion0.4.0
Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-references known CVE/GHSA advisories (OSV.dev) and detects typosquatting, malicious install scripts, token/credential exfiltration and other red flags BEF
- @trustify-da/trustify-da-api-modelReleased2d agoVersion2.0.10
Trustify :: Dependency Analytics :: API
- sic-securityReleased2d agoVersion7.0.0
SIC free code scanner — read-only static analysis for hardcoded secrets, dangerous patterns, and dependency CVEs. Zero runtime dependencies.
- @ship-safe/mcpReleasedyesterdayVersion0.5.1
ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop
- @datanexusmcp/mcp-serverReleased2d agoVersion2.4.12
DataNexus MCP — AI-Ready public data intelligence. 55 tools: CVE risk verdicts, SBOM licence policy, frontend security (manifest audit, CI scanner, typosquatting), licence compatibility, nonprofit 990 trends, SBOM monitoring, federal contracts, NPI lookup
- @ship-safe/cliReleasedyesterdayVersion1.1.18
Security scanner for AI-generated code — find vulnerabilities before you ship
- pup-appsecReleased1 week agoVersion0.1.0
Pup — an AI-native, evidence-based application security platform: contextual AI SAST, reachability-based SCA, and threat modelling for JavaScript/TypeScript.
- @safedep/vetReleased6d agoVersion1.17.4
An open source software supply chain security tool built for developers and security engineers
- securewithtraceReleased3d agoVersion0.29.0
Official Trace CLI for vulnerability intelligence in your terminal
- solidity-agent-toolkitReleased4d agoVersion0.8.2
MCP server providing Solidity smart contract security analysis tools, OWASP knowledge base, and development utilities for AI agents
- @marshell/chifuReleased11h agoVersion0.3.3
Make your AI coding agent dependency-security aware. Checks your project's dependencies against known CVEs so your agent can fix what it introduced — before merge.