GitHub - SourceCode-AI/aura: Python source code auditing and static analysis on a large scale

Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Project goals: provide an automated monitoring system over uploaded packages to PyPI, alert on anomalies that can either indicate an ongoing attack or vulnerabilities in the code enable an organization to conduct automated security audits of the sou

[tmatsuu]

Pythonで書かれたソースコードの監査＆静的解析ツール。脆弱性につながる実装を指摘してくれる模様。同様の解析ツールは偽陽性を抑える実装になっているが、これはあえて多くの情報を提示することを是としている模様