Static-analysis Libraries

24 Components & Libraries

Sortby

Static-analysis Libraries

An extremely fast Python linter, written in Rust.

An extremely fast Python linter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff is ext…

An extremely fast Python linter and code formatter, written in Rust.

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common int…

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

We support multiple deployment models: Use Packj to audit dependencies in pull requests. The quickest way to try/test Packj is using Docker. Podman is also supported for containerized (isolated) runs…

A linter to prevent exception handling antipatterns in Python (limited only for those who like dinosaurs).

“For those who like dinosaurs 🦖 and clean try/except ✨ blocks.” OR You can enable experimental analyzers by running: You can also autofix some violations: If you want to ignore a violation in a speci…

`mllint` is a command-line utility to evaluate the technical quality of Python Machine Learning (ML) projects by means of static analysis of the project's repository.

For those interested in the research output produced in my MSc thesis: Or if your project uses Pipenv: In CI scripts, such raw markdown output (whether as a file or printed to the standard output) ca…

:wolf: Malware analysis platform

Freki is a free and open-source malware analysis platform. Freki was presented at the XXI Brazilian Symposium on Information and Computational Systems Security (SBSeg 2021). This project is licensed …

A Python type checker

Pyanalyze is a tool for programmatically detecting common mistakes in Python code, such as references to undefined variables and type errors. It can be extended to add additional rules and perform ch…

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure. The most important thing I have done as a programmer in recent years is to aggressively pursue static c…

Finds security holes in your Python projects from PyCharm and GitHub

A plugin to run security checks for common flaws in Python code and suggest quick fixes. Check out the webinar for a full demo of the functionality in this plugin: This plugin will check the installe…

:rocket: A linter, formatter for finding and removing unused import statements.

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

Awesome Python Security resources 🕶🐍🔐

A curated list of awesome Python security related resources.

Performing security tests inside your CI

Developers can set up a new stage into their CI pipelines to check for vulnerabilities: If security issues are found in the code, the severity, the confidence, the file, the line, and many more usefu…

Performant type-checking for python.

We start by creating an empty project directory and setting up a virtual environment: Next, we teach Pyre about our new project: We are now ready to run Pyre: Pyre is licensed under the MIT license.

A service that analyzes docker images and scans for vulnerabilities

Anchore Engine is an open-source project that provides a centralized service for inspection, analysis, and certification of container images. Anchore Engine is provided as a Docker container image th…

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Basic script to detect vulnerabilities into a PHP source code, it is using Regular Expression to find sinkholes. Currently detecting : if you want to export each vulnerabilities type into a folder us…

A GitHub :octocat: app to automatically review Python code style over Pull Requests

Usually, the master branch is deployed as soon as Pull Requests are merged in the repository. However, on every Friday, I make a release and make sure the latest code is deployed. You do not need to …

A GitHub :octocat: app to automatically review Python code style over Pull Requests

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, dataflow analysis) Example usage and output: Before continuing, make sure you have pytho…

A static type analyzer for Python code

Pytype checks and infers types for your Python code - without requiring type annotations. Pytype can: Pytype is a static analyzer; it does not execute the code it runs on. Thousands of projects at Go…

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Version: v3.6 beta Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of pe…

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

Flake8 is a wrapper around these tools: It also adds a few features: files that contain this line are skipped: Git and Mercurial hooks We would love to hear from you. Additionally, if you have a feat…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Checks syntax of reStructuredText and code blocks nested within it

Checks syntax of reStructuredText and code blocks nested within it. Contents From pip To use pyproject.toml for configuration: To add sphinx support: With bad Python syntax: With bad C++ syntax: With…

Related tags