75,530 packages matching “semgrep-rules”

@comity-dev/semgrep-rules

v0.1.1 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Reusable Semgrep rules for Comity structural source-code patterns. Development tooling.

305Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.1 (the latest release), from the OSV.dev database.

oauthlint-rules

v0.11.1 · 28 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Semgrep rules catching the OAuth, OIDC, JWT, and MCP security bugs that AI coding tools produce.

30Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.11.1 (the latest release), from the OSV.dev database.

codesentry-semgrep-rules

v0.4.0 · 9 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Snapshot local das regras OWASP do Semgrep para CodeSentry

240Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.4.0 (the latest release), from the OSV.dev database.

@pragmatiks/lint

v0.4.1 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Pragmatiks engineering principles eslint config and bundled semgrep rules.

9Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.4.1 (the latest release), from the OSV.dev database.

@spectre-agent/scanner

v0.1.1 · 22 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Spectre security scanner (Semgrep rules + secret detection)

3Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.1 (the latest release), from the OSV.dev database.

@zibby/bin-semgrep

v1.169.1 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Zibby-owned, self-vendored Semgrep OSS engine (semgrep-core) delivery. Materializes the host-matched, sha256-pinned semgrep-core (+ its bundled libs) ON DEMAND from Zibby's own CDN into a local cache — no image bake, no upstream-npm binary trust at run ti

729Downloads across all versions in the last 7 days, from the official npm downloads API.LGPL-2.1License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.169.1 (the latest release), from the OSV.dev database.

@codacy/tools-opengrep-1

v0.23.1 · 12 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Opengrep adapter — CLI-mode multi-language SAST scanner

865Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.23.1 (the latest release), from the OSV.dev database.

glance-scanner

v1.5.6 · 17 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Security scanner for AI agents. Static analysis by default (semgrep + npm audit), no API key. Optional AI semantic analysis on your own provider key.

46Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.5.6 (the latest release), from the OSV.dev database.

@pensar/semgrep-node

v1.2.4 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Nodejs semgrep wrapper

1.3KDownloads across all versions in the last 7 days, from the official npm downloads API.LGPL-2.1-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.2.4 (the latest release), from the OSV.dev database.

llm-audit

v0.6.2 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Static analysis for LLM-application code. OWASP LLM Top 10 at commit time.

61Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.6.2 (the latest release), from the OSV.dev database.

mcp-server-semgrep

v1.0.1 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

MCP Server for Semgrep Integration - static code analysis with AI

588Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.1 (the latest release), from the OSV.dev database.

@mondoohq/xgrep_darwin_arm64

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

xgrep binary for darwin arm64.

1.3KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@mondoohq/xgrep_linux_arm64

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

xgrep binary for linux arm64.

1.3KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@mondoohq/xgrep_windows_arm64

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

xgrep binary for win32 arm64.

1.2KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@mondoohq/xgrep_windows_amd64

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

xgrep binary for win32 x64.

1.2KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@mondoohq/xgrep_linux_amd64

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

xgrep binary for linux x64.

2.7KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@fabulateau/fabulate-ui

v4.0.7 · 13 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A UI component library for Fabulate app.

829Downloads across all versions in the last 7 days, from the official npm downloads API.

No known vulnerabilities

Known vulnerabilities affecting v4.0.7 (the latest release), from the OSV.dev database.

@mondoohq/xgrep

v0.73.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A fast, Semgrep-compatible code scanner written in Go.

2.5KDownloads across all versions in the last 7 days, from the official npm downloads API.LicenseRef-Mondoo-ProprietaryLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.73.0 (the latest release), from the OSV.dev database.

@sinonjs/commons

v4.0.0-alpha.0 · 2 years ago

90
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Simple functions shared among the sinon end user libraries

40.8MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.0.0-alpha.0 (the latest release), from the OSV.dev database.

carrot-scan

v6.0.1 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Command-line tool for detecting vulnerabilities in files and directories.

30.2KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v6.0.1 (the latest release), from the OSV.dev database.
1 / 50Next