microsoft/ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes. observed · 2026-08-28
Health v2 · maintenance only
95/100
- Activity 99
- Release rhythm 87
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 41.0
- age_days: 2522
- days_rel: 7
- days_push: 7
- n_releases_24m: 13
Adoption not part of the score
4396 stars · 366 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Microsoft Application Inspector is a source code characterization tool that uses a JSON-based rules engine with 400+ regex patterns to identify features of first- or third-party code, such as cryptography use, file operations, cloud APIs, and frameworks. It supports many languages and produces HTML, JSON, or text reports to quickly answer 'what's in the code?'.
Use cases
- analyze what features an open-source component contains before adopting it
- detect feature-level changes between versions of a codebase
- scan third-party code for security-relevant characteristics like encryption or shell execution
- identify which frameworks and APIs a mixed-language project uses
- audit untrusted source code without relying on documentation
When to choose
- you need fast feature-level characterization of source code across many languages
- you want to vet third-party or OSS components before use
- you need to diff feature sets between code versions
When to avoid
- you need deep bug or vulnerability detection rather than feature identification
- you need runtime or dynamic analysis
- you need full SAST with taint tracking
Facets
cli-tool · maturity active
security parser developer-tools security developer-tools cross-platform cli windows dotnet source-code-characterization static-analysis rules-engine feature-detection software-composition-analysis linux macos
1 source
- readme: https://github.com/microsoft/ApplicationInspector · fetched 2026-08-28 · 3e0b5d9a206b
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| microsoft/ApplicationInspector | main | 95 |
For agents
markdown · JSON · MCP: product_card(name="microsoft/ApplicationInspector")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem