{"adoption": {"forks": 181, "observed_at": "2026-08-28T04:05:18.277375+00:00", "stars": 1659}, "canonical_url": "https://ross.abutalabs.com/products/tabby-sec-tabby", "card": {"archived": false, "artifact_type": "cli-tool", "description": "A CAT called tabby ( Code Analysis Tool )", "domain": ["security", "developer-tools", "reverse-engineering"], "enriched": true, "function": ["linter", "security", "vulnerability-scanning", "parser", "search-engine"], "health_score": 72, "homepage": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx", "language": "Java", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["tabby-sec/tabby"], "name": "tabby-sec/tabby", "platform": ["jvm", "cli"], "pushed_at": "2026-01-17T16:18:44+00:00", "repo": "tabby-sec/tabby", "stars": 1659, "tags": ["java-static-analysis", "code-property-graph", "soot", "neo4j", "gadget-chain", "taint-analysis", "deserialization", "code-audit", "docker"], "topics": ["java-static-analysis", "based-on-soot", "gadget-chain-discover", "security-tools"], "urls": [], "use_cases": ["find java deserialization gadget chains in libraries", "audit java web applications for vulnerabilities", "search for classes calling dangerous sink functions", "analyze fatjar war jsp and class files statically", "automate exploit chain discovery with neo4j cypher queries"], "what_it_is": "Tabby is a Java static code analysis tool built on the Soot framework that converts JAR/WAR/CLASS files into a code property graph stored in Neo4j. It enables automated discovery of deserialization gadget chains and common web vulnerabilities via Cypher path queries and taint analysis.", "when_to_avoid": ["you need dynamic or runtime analysis rather than static analysis", "your target is not JVM bytecode", "you cannot run a Neo4j database alongside the tool"], "when_to_choose": ["you need to find deserialization gadget chains in Java dependencies", "you want a code property graph of Java code for custom vulnerability queries", "you do security research or code auditing on Java projects"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/tabby-sec-tabby", "repo": "tabby-sec/tabby", "role": "main", "score": 51}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.277375+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:44:43.221093+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dd5cd203b0a15e66c8c00e979bb0f8b3a84744c2795935666273bbca72bd9c2b", "fetched_at": "2026-08-28T04:05:18.277375+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tabby-sec/tabby"}, {"content_hash": "bb9496e35b3ace871ed4bdb7128b3551ce713c3d9ee3b5a73a511278af0c313c", "fetched_at": "2026-08-29T11:17:15.424028+00:00", "kind": "homepage", "missing": false, "url": "https://www.yuque.com/wh1t3p1g/tp0c1t/lf12lg69ngh47akx"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 62, "longevity": 100, "rhythm": 10}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2154, "days_push": 228, "days_rel": 391, "gap_med": 199, "n_releases_24m": 2}, "score": 51, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}