All projects
Repositories in this selection 5 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Aanchore / syftCLI tool and library for generating a Software Bill of Materials from container images and filesystemsGoApache-2.0 · PermissiveInsufficient rank history9,8171,040——2026-11-02
2—DDependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,400853——2026-11-03
3—RRetireJS / retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.JavaScriptApache-2.0 · PermissiveInsufficient rank history4,199441——2026-10-30
4—Ee-m-b-a / embaEMBA - The firmware security analyzerShellGPL-3.0 · Share derivative sourceInsufficient rank history3,746344——2026-11-03
5—Llunasec-io / lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history1,473165——2024-05-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.