Top 10 taint-analysis Open-Source Projects

pyre-check

24 6,687 9.9 OCaml

Performant type-checking for python.

Project mention: Pylyzer – A fast static code analyzer and language server for Python | news.ycombinator.com | 2024-04-11

Did you come across pyre in your search? MIT license and pretty fast.
https://github.com/facebook/pyre-check

Psalm

45 5,428 9.9 PHP

A static analysis tool for finding errors in PHP applications

Project mention: Laravel code-quality tools | dev.to | 2024-02-08

Psalm is a static analysis tool for PHP. Much like PHPStan is to Larastan, Psalm has a plugin called Laravel Psalm that allows you to easily use it in Laravel projects.

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
Triton

4 3,299 7.8 C++

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code. (by JonathanSalwan)
find-sec-bugs

8 2,201 6.1 Java

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
pyt

2 2,161 0.0 Python

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
bap

3 1,975 4.5 OCaml

Binary Analysis Platform
bincat

1 1,610 6.6 OCaml

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
polytracker

2 497 7.7 C++

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
aura

3 483 4.3 Python

Python source code auditing and static analysis on a large scale (by SourceCode-AI)
funky

1 3 2.6 Rust

Webassembly Interpreter + taint analysis (by kper)

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).