Python Security Packages

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

skylos

Open-source PR gate for Python, TS/JS, Java, and Go. Stop merging dead code, secrets, security flows, and AI-code regressions.

ca9

Open source Python CVE reachability analysis for evidence-backed SCA triage. Turn Snyk, Dependabot, Trivy, pip-audit, and OSV alerts into fix, suppress, or investigate decisions.

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

pyobfus-mcp

🛡️ Modern Python code obfuscator - Enterprise-grade protection at 50% lower cost than PyArmor

pyobfus

pyobfus — the Python obfuscator. AST-based python-obfuscator / code-obfuscator with framework-aware presets (FastAPI, Django, Pydantic, Click, SQLAlchemy), reverse stack-trace mapping for AI-assisted debugging, and JSON CLI for Claude Code, Cursor, and MCP agents. Modern PyArmor alternative, Apache-2.0.

simplesecurity

Combine multiple popular python security tools and generate reports or output into different formats

secret-vault

A secret file storage vault in python

veripypi

WIP: Verify the package installed from PyPi is the same as the code on Github