🔐 Security advisories as a simple composer exclusion list, updated daily

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

QuillAudits — Smart Contract Audits for DeFi, RWA, DEXs, Tokens, DeAI & DApps

SQL optimizer and rewriter for laravel. - laravel 的 SQL 优化器和重写器。

AutoVAS is an automated vulnerability analysis system with a deep learning approach.

Checkmarx Scan Github Action

Security tools that you can inject into devops

LSVerifier - Large Systems Verifier

Docker Image Security Workshop for Best Practices

A Laravel package with an encryptable trait to manage encrypting database table fields

WordPress Security Advisories. Add this package to prevent vulnerable WordPress packages from being installed.

Dockerfiles, setup instructions, code and write-ups for hands-on exploration of Carsten Eiler's book "You've Been Hacked" on security vulnerabilities in web applications.

A project for exploring common security vulnerabilities in web applications

Default Community Health Files

Security assessment of a RESTful distributed computing application. I acted as a cybersecurity consultant, identifying vulnerabilities and providing a mitigation plan. (Software Security course project)

Replication package for "Not All AI Code Is Equal" — a multi-model comparison of defects, vulnerabilities, and complexity in human- and AI-generated code. Runs Pylint/PMD, Semgrep, and Lizard analyses over 500 Python & Java tasks each from Claude Opus 4.8, Gemini 2.5 Pro, and Qwen2.5-Coder vs. human code.

A Node app to save the contents of GitHub's Vulnerability Database to a JSON file.

technical exploration of cross-chain bridge vulnerabilities in decentralized finance (DeFi) systems. Cross-chain bridges allow the transfer of assets between different blockchain ecosystems but often present critical security challenges.