# wireghoul/graudit

grep rough audit - source code auditing tool

Repository: https://github.com/wireghoul/graudit
Canonical: https://ross.abutalabs.com/products/graudit
Homepage: http://www.justanotherhacker.com
Language: Shell
License: GPL-3.0
License Family: copyleft
Topics: security, shell, vulnerability-detection, source-code, security-audit, security-tools
Last push: 2025-12-19T02:24:05+00:00

## Health v2 (maintenance only)
Score: 59/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 57, release rhythm 38, longevity 100
- inputs: {"age_days": 6289, "days_push": 258, "days_rel": 258, "gap_med": 120, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1688, forks 257 (observed 2026-08-28T04:05:22.290792+00:00)

## What it is
graudit is a shell-based source code auditing tool that uses GNU grep with signature databases of extended regular expressions to find potential security flaws in code. It is a lightweight alternative to static analysis tools like RATS, SWAAT and flaw-finder, with extensible signature databases for many languages.

## Use cases
- scan a codebase for potential security vulnerabilities
- find insecure function usage in source code
- run a quick static security audit without heavy tooling
- audit code for language-specific dangerous patterns
- create custom regex signatures to detect project-specific flaws
- integrate lightweight vulnerability scanning into scripts or CI

## When to choose
- you want a minimal-dependency, grep-based security scanner
- you need flexible, easily extensible signature databases
- you prefer a fast command-line tool over heavyweight SAST suites
- you want to audit code in languages covered by its signature sets

## When to avoid
- you need deep dataflow or taint analysis rather than pattern matching
- you require low false positives from a full static analysis engine
- you need IDE integration or rich reporting dashboards
- your environment lacks GNU grep or a POSIX shell

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, search-engine, cli
- domain: security, developer-tools
- platform: cli, cross-platform
- tags: static-analysis, grep, source-code-audit, shell-script, signature-based-scanning, command-line, linux, macos

## Member repositories
- wireghoul/graudit (main) score 59

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:22.290792+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:38:49.627180+00:00, confidence not recorded.
  - readme: https://github.com/wireghoul/graudit (fetched 2026-08-28T04:05:22.290792+00:00, sha 44df46f595bc)
  - homepage: http://www.justanotherhacker.com (fetched 2026-08-29T11:13:38.036341+00:00, sha ac255e659941)
- Data as of 2026-08-30T08:39:29.467469+00:00.