Bright CLI is a CLI tool that can initialize, stop, poll and maintain scans in Bright solutions.

server logic

The Common Vulnerability Scoring System ([CVSS](https://www.first.org/cvss/)) [score](https://www.first.org/cvss/specification-document#1-2-Scoring) calculator and validator library written in [TypeScript](https://www.typescriptlang.org/).

Durable Postgres feeds, findings, alert incidents, policy history, delivery queues, remediation evidence, and risk assessments for AbsoluteJS vulnerability management.

Governance receipts for AI agents — AI-driven security scanning with a stack-specific threat model, signed audit receipts for every scan, and trust scores that improve with verified fixes. Supports EU AI Act, Colorado AI Act (SB 24-205), and NIST AI RMF a

LLM eval & testing toolkit

Deploy AWS Lambda functions from command line using a json or yaml config file.

A client-side JavaScript OpenID Connect library that can be used to secure web applications.

This packages modifies package-lock.json to force the installation of specific version of a transitive dependency (dependency of dependency), similar to yarn's [selective dependency resolutions](https://yarnpkg.com/lang/en/docs/selective-version-resolutio

Aira Cyber Security AI — Local CLI security auditor powered by AIRAGROUP: SAST code scanning, read-only local system hardening diagnostics, and passive website security checks (headers/SSL/DNS).

TRUST — Trust Reporting & Unified Security Testing. Zero-dependency security verification for web, API, storage, AI-agent and mobile targets.

Wallet base implementation

Local wallet implementation

CVE MCP Server providing security vulnerability analysis and Red Hat CVE data

If you want to use [RedHatInsights/vulnerability-engine](https://github.com/RedHatInsights/vulnerability-engine) you shouldn't use get requests directly, but rather use this client to integrate with this service.

Embedding PDF files in your Angular application. Highly configurable viewer including the toolbar, sidebar, and all the features you're used to.

QA Architect - Security audit and quality automation for AI-generated codebases. Scans for OWASP Top-10 vulnerabilities, CVEs, and common vibe-coding mistakes.

GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).

AI-powered codebase archaeology: understand what you inherited

MCP wrapper for static required-receipt declaration scanning. Runtime verification, consumption, and EG-1 enforcement remain explicitly unassessed.