Ross ROSS = Recommend OSS · open-source software intelligence for agents

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities. observed · 2026-08-28

github.com/snyk/cli · homepage · TypeScript · NOASSERTION (other) observed · 2026-08-28

Health v2 · maintenance only

99/100

  • Activity 99
  • Release rhythm 99
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 14.5
  • age_days: 3960
  • days_rel: 7
  • days_push: 7
  • n_releases_24m: 47

Full methodology

Adoption not part of the score

5649 stars · 699 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

The Snyk CLI is a command-line tool that scans projects for security vulnerabilities across open-source dependencies, application code, container images, and IaC configurations. It integrates into local development workflows, IDEs, and CI/CD pipelines, with monitoring via the Snyk platform.

Use cases

  • scan npm dependencies for known vulnerabilities
  • find security issues in my source code from the terminal
  • scan docker images for vulnerabilities in CI
  • check terraform and kubernetes configs for insecure settings
  • add vulnerability scanning to my CI/CD pipeline
  • monitor my projects for newly disclosed CVEs

When to choose

  • you want developer-first security scanning across dependencies, code, containers, and IaC from one tool
  • you need CLI-based scanning that fits into local dev, IDEs, and CI/CD pipelines
  • you want continuous monitoring and auto-fix suggestions for open-source vulnerabilities

When to avoid

  • you need a fully self-hosted scanner with no cloud service dependency
  • you require an OSI-approved open-source license for commercial use
  • you only need dynamic (DAST) or runtime security testing

Facets

cli-tool · maturity active

security vulnerability-scanning cli ci-cd monitoring security developer-tools infrastructure-as-code cli cross-platform windows sast sca dependency-scanning container-scanning iac-scanning static-analysis appsec devops containers macos linux docker kubernetes

7 sources

Member repositories

RepositoryRoleHealth v2
snyk/climain99

For agents

markdown · JSON · MCP: product_card(name="snyk/cli")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem