tabby-sec/tabby
A CAT called tabby ( Code Analysis Tool ) observed · 2026-08-28
Health v2 · maintenance only
51/100
- Activity 62
- Release rhythm 10
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 199
- age_days: 2154
- days_rel: 391
- days_push: 228
- n_releases_24m: 2
Adoption not part of the score
1659 stars · 181 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Tabby is a Java static code analysis tool built on the Soot framework that converts JAR/WAR/CLASS files into a code property graph stored in Neo4j. It enables automated discovery of deserialization gadget chains and common web vulnerabilities via Cypher path queries and taint analysis.
Use cases
- find java deserialization gadget chains in libraries
- audit java web applications for vulnerabilities
- search for classes calling dangerous sink functions
- analyze fatjar war jsp and class files statically
- automate exploit chain discovery with neo4j cypher queries
When to choose
- you need to find deserialization gadget chains in Java dependencies
- you want a code property graph of Java code for custom vulnerability queries
- you do security research or code auditing on Java projects
When to avoid
- you need dynamic or runtime analysis rather than static analysis
- your target is not JVM bytecode
- you cannot run a Neo4j database alongside the tool
Facets
cli-tool · maturity active
linter security vulnerability-scanning parser search-engine security developer-tools reverse-engineering jvm cli java-static-analysis code-property-graph soot neo4j gadget-chain taint-analysis deserialization code-audit docker
2 sources
- readme: https://github.com/tabby-sec/tabby · fetched 2026-08-28 · dd5cd203b0a1
- homepage: https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx · fetched 2026-08-29 · bb9496e35b3a
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| tabby-sec/tabby | main | 51 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem