Skip to content

Add DepWarden — free SCA + SAST scanner (15 languages, no account) - #1848

Open
Rushabh5000 wants to merge 2 commits into
analysis-tools-dev:masterfrom
Rushabh5000:master
Open

Add DepWarden — free SCA + SAST scanner (15 languages, no account)#1848
Rushabh5000 wants to merge 2 commits into
analysis-tools-dev:masterfrom
Rushabh5000:master

Conversation

@Rushabh5000

Copy link
Copy Markdown

What is DepWarden?

DepWarden is a free, anonymous SCA + SAST security scanner available as a web tool, zero-install CLI (npx depwarden) and GitHub Action.

SCA (Software Composition Analysis):

  • Scans npm, PyPI, Maven, Gradle, Go, Cargo, Ruby, .NET, PHP, Dart, Swift dependencies
  • Vulnerability data from OSV, enriched with CISA KEV (active exploitation) and FIRST EPSS (exploit probability)
  • Typosquatting and dependency confusion detection
  • End-of-life package detection, OpenSSF Scorecard health, license compliance

SAST (Static Application Security Testing):

  • 15 languages: JavaScript, TypeScript, Python, Java, Go, PHP, Ruby, C, C++, C#, Rust, Kotlin, Swift, Shell, Scala
  • IaC: Terraform/HCL, Dockerfile, Kubernetes YAML, GitHub Actions
  • 300+ rules: injection (taint analysis), hardcoded secrets, weak cryptography, framework misconfigurations

Key differentiator: No account required, no source upload — manifest text and source zip only, processed in an isolated workspace.

Links

@Rushabh5000
Rushabh5000 marked this pull request as draft June 29, 2026 10:29
@Rushabh5000
Rushabh5000 marked this pull request as ready for review June 29, 2026 10:29
@mre

mre commented Aug 28, 2026

Copy link
Copy Markdown
Member

Thanks for submitting DepWarden. The submitted source repository currently returns 404, so we cannot verify the contribution criteria.

@mre mre closed this Aug 28, 2026
@Rushabh5000

Rushabh5000 commented Aug 28, 2026 via email

Copy link
Copy Markdown
Author

@mre

mre commented Aug 28, 2026

Copy link
Copy Markdown
Member

Just remove the source tag and it counts as proprietary.

@mre mre reopened this Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants