LoRexxar/Kunlun-M

Health v2 · maintenance only

Adoption not part of the score

2413 stars · 316 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Kunlun-M is an open-source static code analysis (SAST) tool that detects security vulnerabilities in PHP, JavaScript/Node.js, Python, Golang, Java, and C/C++ using AST-based semantic scanning. It offers CLI, console, and web modes, custom rule generation, and one-click integration with AI coding agents.

Use cases

• scan a php codebase for security vulnerabilities
• find injection flaws in javascript and nodejs projects
• audit python source code for security issues before release
• detect php deserialization chains in a web application
• write custom static analysis rules for my team's code
• integrate sast scanning into my ci pipeline
• use an ai agent to triage static analysis findings

When to choose

• you need multi-language static security scanning from a single tool
• you want ast-based semantic analysis rather than simple regex greps
• you need customizable rules and tampers for framework-specific code like wordpress
• you want an open-source, self-hosted sast tool with ai agent integration

When to avoid

• you need dynamic analysis or runtime penetration testing rather than static scanning
• you require commercial-grade support and compliance reporting
• your codebase is in languages outside its supported set
• you need a fully managed cloud sast service

Facets

cli-tool · maturity active

security vulnerability-scanning parser linter security developer-tools penetration-testing python cli cross-platform windows static-analysis sast code-audit ast php javascript python golang java c-cpp vulnerability-detection ai-agent-integration linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="LoRexxar/Kunlun-M")