Back to Topics Directory
Topic Hub

#taint-analysis (14 Repositories)

Ranked open-source repositories tagged with #taint-analysis, scored by pull request acceptance likelihood and maintainer engagement velocity.

Topic Avg Merge Rate

20.0%

Avg Review Latency

0.7h

Filter by language

14 repositories tagged #taint-analysis

B TierC++ 4.3k

JonathanSalwan/Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

100.0%
Merge Rate
<1h
First Review
100%
1st-Timers
1
Maintainers
B TierJava 1.8k

pascal-lab/Tai-e

An easy-to-learn/use static analysis framework for Java and Android

100.0%
Merge Rate
<1h
First Review
0%
1st-Timers
0
Maintainers
B TierPHP 5.9k

vimeo/psalm

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

5.0%
Merge Rate
-
First Review
0%
1st-Timers
3
Maintainers
B TierPython 158

Lekssays/codebadger

🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).

50.0%
Merge Rate
10h
First Review
0%
1st-Timers
1
Maintainers
B TierElixir 194

elixir-vibe/reach

Program dependence graph and architecture/code-flow analysis for BEAM projects

25.0%
Merge Rate
-
First Review
0%
1st-Timers
1
Maintainers
D TierOCOCaml 7.2k

facebook/pyre-check

Performant type-checking for python.

0.0%
Merge Rate
<1h
First Review
0%
1st-Timers
0
Maintainers
D TierTypeScript 326

antgroup/YASA-Engine

YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, designed to support multiple programming languages. Built on top of UAST, YASA provides a highly accurate static analysis framework.

0.0%
Merge Rate
<1h
First Review
0%
1st-Timers
0
Maintainers
D TierPython 493

SourceCode-AI/aura

Python source code auditing and static analysis on a large scale

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierShell 340

BytecodeDL/ByteCodeDL

A declarative static analysis tool for jvm bytecode based Datalog like CodeQL

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierOCOCaml 2.3k

BinaryAnalysisPlatform/bap

Binary Analysis Platform

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierOCOCaml 1.9k

airbus-seclab/bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierJava 2.4k

find-sec-bugs/find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierC++ 957

AngoraFuzzer/Angora

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierC 841

decaf-project/DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers