ajinabraham/nodejsscan

Health v2 · maintenance only

Adoption not part of the score

2570 stars · 343 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

nodejsscan is a static application security testing (SAST) scanner for Node.js applications, built on libsast and semgrep. It provides a web UI, CLI, and Python API for scanning JavaScript code for security vulnerabilities.

Use cases

• scan node.js app for security vulnerabilities
• static analysis of javascript code for insecure patterns
• integrate sast scanning into ci pipeline for nodejs
• find hardcoded secrets and injection flaws in node code
• run a security code review on a nodejs project
• self-host a web ui for nodejs security scanning

When to choose

• you need automated SAST for Node.js/JavaScript codebases
• you want both a CLI for CI/CD and a web UI for triaging findings
• you prefer semgrep-based rule scanning with a Node.js focus

When to avoid

• you need dynamic (DAST) or runtime security testing
• you need Windows support, which was dropped in version 4
• you scan non-JavaScript languages

Facets

cli-tool · maturity active

security vulnerability-scanning static-site-generator developer-tools linter security developer-tools web-development backend python cli sast static-analysis nodejs-security semgrep devsecops code-scanner linux macos docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ajinabraham/nodejsscan")