sshd-config
Zero-dependency, offline static analyzer for OpenSSH sshd_config. Flags weak crypto, auth, and access-control settings for SSH hardening, referencing CIS, Mozilla, and NIST guidance, with CI-friendly exit codes.