Repositories list

• vuln-list

  Public
  Linux upstream vulnerabilities data suitable for dep-scan

  Apache License 2.0

  •0•20•0•0•Updated Aug 2, 2025Aug 2, 2025

• nodejs-unofficial-builds

  Public
  Unofficial binaries for Node.js

  Shell

  •70•0•0•0•Updated Aug 1, 2025Aug 1, 2025

• atom-samples

  Public
  Collection of atom, data-flow, and usage slices for appthreat/atom https://github.com/appthreat/atom.

  Python

  •

  Apache License 2.0

  •2•2•1•1•Updated Aug 1, 2025Aug 1, 2025

• cdx-proto

  Public
  Runtime library to serialize/deserialize CycloneDX BOM with protocol buffers

  automationlibrarytypescript+ 6protobufintegrationruntimesbomcyclonedxprotobom

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Jul 31, 2025Jul 31, 2025

• vulnerability-db

  Public
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers.

  clidatabasecve+ 7nvdvulnerability-detectionscaadvisoriesverspurlvulnerability-database

  Python

  •

  MIT License

  •25•122•32•1•Updated Jul 31, 2025Jul 31, 2025

• node-sqlite3

  Public
  SQLite3 bindings for Node.js

  PLpgSQL

  •

  BSD 3-Clause "New" or "Revised" License

  •0•0•0•0•Updated Jul 31, 2025Jul 31, 2025

• vdb

  Public
  Precompiled AppThreat vulnerability database for dep-scan

  Shell

  •

  MIT License

  •1•1•0•0•Updated Jul 30, 2025Jul 30, 2025

• atom

  Public
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

  code-analysissupply-chainintermediate-representation+ 5variant-analysisvulnerability-analysisreachability-analysisapplication-analyticsexploit-prediction

  Rust

  •

  MIT License

  •3•71•39•0•Updated Jul 29, 2025Jul 29, 2025

• chen

  Public
  Code Hierarchy Exploration Net (chen)

  dependency-analysiscode-analysiscode-hierarchy-representation

  Scala

  •

  Apache License 2.0

  •2•21•18•1•Updated Jul 29, 2025Jul 29, 2025

• atom-tools

  Public
  Collection of tools for use with AppThreat/atom.

  Python

  •

  MIT License

  •1•5•5•1•Updated Jul 29, 2025Jul 29, 2025

• vuln-list-update

  Public
  Collects vulnerability data from a range of sources.

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Jul 28, 2025Jul 28, 2025

• ruby_ast_gen

  Public
  A Ruby AST generator tool

  Ruby

  •

  Apache License 2.0

  •0•1•0•0•Updated Jul 23, 2025Jul 23, 2025

• caxa

  Public
  Package Node.js applications into executable binaries. Forked from leafac/caxa.

  JavaScript

  •

  MIT License

  •0•5•0•0•Updated Jul 16, 2025Jul 16, 2025

• base-images

  Public
  Container base images for AppThreat sponsors and customers.

  sponsorsbase-imagessbom+ 4container-imagescdxgendepscanblint

  Java

  •

  MIT License

  •0•0•3•0•Updated Jun 17, 2025Jun 17, 2025

• blint-db

  Public
  Binary symbols database for OWASP blint

  binary-analysissqlite3-databasesbom+ 1symbols-database

  Python

  •

  MIT License

  •2•2•4•1•Updated Jun 3, 2025Jun 3, 2025

• alpine-lima

  Public
  Create an alpine based ISO image for lima

  Shell

  •

  Apache License 2.0

  •30•0•0•0•Updated May 31, 2025May 31, 2025

• .github

  Public
  Apache License 2.0

  •0•0•0•0•Updated Apr 19, 2025Apr 19, 2025

• appthreat.github.io

  Public
  AppThreat website

  MIT License

  •0•0•0•0•Updated Apr 18, 2025Apr 18, 2025

• custom-json-diff

  Public
  A utility to compare json documents containing dynamically-generated fields.

  Python

  •

  Apache License 2.0

  •0•0•5•0•Updated Mar 12, 2025Mar 12, 2025

• cdxgen-samples

  Public
  CycloneDx/cdxgen snapshot repository.

  Apache License 2.0

  •0•0•0•2•Updated Jan 7, 2025Jan 7, 2025

• cpg2

  Public
  Scala

  •

  Apache License 2.0

  •0•1•0•0•Updated Nov 17, 2024Nov 17, 2024

• overflowdb2

  Public
  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 17, 2024Nov 17, 2024

• dep-scan-snapshots

  Public
  Testing snapshots for OWASP-dep-scan/dep-scan.

  MIT License

  •0•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• cdx-hbom

  Public
  Apache License 2.0

  •0•0•0•0•Updated Apr 17, 2024Apr 17, 2024

• dep-scan-action

  Public
  Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!

  MIT License

  •4•9•0•1•Updated Feb 18, 2024Feb 18, 2024

• depscan-testing

  Public
  0•0•0•0•Updated Feb 1, 2024Feb 1, 2024

• node-stream-zip

  Public
  node.js library for fast reading of large ZIPs

  JavaScript

  •

  Other

  •65•0•0•0•Updated Nov 12, 2023Nov 12, 2023

• cpggen

  Public archive
  Generate CPG for multiple languages for code and threat analysis

  securitycode-analysisjoern+ 2cpgcodepropertygraph

  C#

  •

  Apache License 2.0

  •0•11•6•0•Updated Sep 22, 2023Sep 22, 2023

• cdxgen-docs

  Public
  Documentation repo for CycloneDX Generator (cdxgen)

  Apache License 2.0

  •0•1•0•0•Updated Sep 16, 2023Sep 16, 2023

• blint-action

  Public
  Action to run BLint, the binary linter.

  Apache License 2.0

  •0•1•0•0•Updated Jul 14, 2023Jul 14, 2023