Repositories list

• vuln-list

  Public
  Linux upstream vulnerabilities data suitable for dep-scan

  Apache License 2.0

  •0•15•0•0•Updated Feb 13, 2025Feb 13, 2025

• atom-tools

  Public
  Collection of tools for use with AppThreat/atom.

  Python

  •

  Apache License 2.0

  •0•4•6•1•Updated Feb 12, 2025Feb 12, 2025

• base-images

  Public
  Container base images for AppThreat sponsors and customers.

  sponsorsbase-imagessbom+ 4container-imagescdxgendepscanblint

  Java

  •

  MIT License

  •0•0•3•0•Updated Feb 1, 2025Feb 1, 2025

• caxa

  Public
  Package Node.js applications into executable binaries. Forked from leafac/caxa.

  JavaScript

  •

  MIT License

  •0•3•1•0•Updated Jan 29, 2025Jan 29, 2025

• atom-samples

  Public
  Collection of atom, data-flow, and usage slices for appthreat/atom https://github.com/appthreat/atom.

  Python

  •

  Apache License 2.0

  •2•2•1•0•Updated Jan 24, 2025Jan 24, 2025

• atom

  Public
  Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

  code-analysissupply-chainintermediate-representation+ 5variant-analysisvulnerability-analysisreachability-analysisapplication-analyticsexploit-prediction

  Rust

  •

  Apache License 2.0

  •3•62•37•0•Updated Jan 23, 2025Jan 23, 2025

• ruby_ast_gen

  Public
  A Ruby AST generator tool

  Ruby

  •

  Apache License 2.0

  •1•1•0•0•Updated Jan 23, 2025Jan 23, 2025

• chen

  Public
  Code Hierarchy Exploration Net (chen)

  dependency-analysiscode-analysiscode-hierarchy-representation

  Scala

  •

  Apache License 2.0

  •2•16•12•0•Updated Jan 17, 2025Jan 17, 2025

• cdxgen-samples

  Public
  CycloneDx/cdxgen snapshot repository.

  Apache License 2.0

  •0•0•0•2•Updated Jan 7, 2025Jan 7, 2025

• vdb

  Public
  Precompiled AppThreat vulnerability database for dep-scan

  Shell

  •

  Apache License 2.0

  •1•1•0•0•Updated Jan 4, 2025Jan 4, 2025

• blint-db

  Public
  Python

  •

  MIT License

  •2•1•0•1•Updated Dec 31, 2024Dec 31, 2024

• vulnerability-db

  Public
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers.

  clidatabasecve+ 7nvdvulnerability-detectionscaadvisoriesverspurlvulnerability-database

  Python

  •

  MIT License

  •22•104•22•0•Updated Dec 19, 2024Dec 19, 2024

• custom-json-diff

  Public
  A utility to compare json documents containing dynamically-generated fields.

  Python

  •

  Apache License 2.0

  •0•0•3•0•Updated Dec 6, 2024Dec 6, 2024

• cpg2

  Public
  Scala

  •

  Apache License 2.0

  •0•1•0•0•Updated Nov 17, 2024Nov 17, 2024

• overflowdb2

  Public
  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 17, 2024Nov 17, 2024

• dep-scan-snapshots

  Public
  Testing snapshots for OWASP-dep-scan/dep-scan.

  MIT License

  •0•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• vuln-list-update

  Public
  Collects vulnerability data from a range of sources.

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Sep 17, 2024Sep 17, 2024

• cdx-hbom

  Public
  Apache License 2.0

  •0•0•0•0•Updated Apr 17, 2024Apr 17, 2024

• cdx-proto

  Public
  Runtime library to serialize/deserialize CycloneDX BOM with protocol buffers

  automationlibrarytypescript+ 6protobufintegrationruntimesbomcyclonedxprotobom

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Apr 13, 2024Apr 13, 2024

• dep-scan-action

  Public
  Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!

  MIT License

  •3•8•0•1•Updated Feb 18, 2024Feb 18, 2024

• depscan-testing

  Public
  0•0•0•0•Updated Feb 1, 2024Feb 1, 2024

• node-stream-zip

  Public
  node.js library for fast reading of large ZIPs

  JavaScript

  •

  Other

  •65•0•0•0•Updated Nov 12, 2023Nov 12, 2023

• cpggen

  Public archive
  Generate CPG for multiple languages for code and threat analysis

  securitycode-analysisjoern+ 2cpgcodepropertygraph

  C#

  •

  Apache License 2.0

  •0•9•6•0•Updated Sep 22, 2023Sep 22, 2023

• cdxgen-docs

  Public
  Documentation repo for CycloneDX Generator (cdxgen)

  Apache License 2.0

  •0•1•0•0•Updated Sep 16, 2023Sep 16, 2023

• blint-action

  Public
  Action to run BLint, the binary linter.

  Apache License 2.0

  •0•1•0•0•Updated Jul 14, 2023Jul 14, 2023

• joern-lib

  Public archive
  Python library for code analysis with CPG and Joern

  securitylibrarycode-analysis+ 6appsecjoerndevsecopscpgsastcodepropertygraph

  Jupyter Notebook

  •

  Apache License 2.0

  •1•15•6•0•Updated Jun 23, 2023Jun 23, 2023

• .github

  Public
  Apache License 2.0

  •0•0•0•0•Updated Jun 21, 2023Jun 21, 2023

• cpggen-action

  Public
  Generate CPG for multiple languages for use with joern

  Apache License 2.0

  •0•0•0•0•Updated Jun 5, 2023Jun 5, 2023

• rosa

  Public
  An experiment that looks very promising so far.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated May 30, 2023May 30, 2023

• docs

  Public
  Docs that are published at https://appthreat.io

  Apache License 2.0

  •0•2•0•0•Updated Mar 11, 2023Mar 11, 2023