anthropics/oss-scanner
Can I trust it?
Worth a closer look before you use it.
Warnings Check
Very new: it was created 12 days ago. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence OK
Apache-2.0: you can use it for free, also in a commercial product. Keep the licence notice.
Quick checks from public data. They help, but they are no guarantee.
What it is
Repository for enrolling open-source projects in Anthropic's OSS Scanner, a service that scans critical open-source projects for security vulnerabilities. Enrolment is done by adding a projects/<name> directory with a project.yaml and Dockerfile. Findings are emailed to the…
Who it's for
Maintainers of open-source projects who want their codebase scanned for security vulnerabilities
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up anthropics/oss-scanner in my project. Follow its README: https://github.com/anthropics/oss-scanner. Explain each step and check it is safe before running anything.
Star curve
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
18,265 GitHub repos watched and ranked every hour. Figures as of 20 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/anthropics/oss-scanner?ref=badge)Similar repos
- anthropics/claude-plugins-official
A curated marketplace directory of Claude Code plugins, split into internal plugins maintained by Anthropic and external plugins from partners and the community. Plugins are installed through Claude C
- opentrap/opentrap
An open-source, Linux-only web application security testing suite offering an intercepting proxy, Repeater, Intruder, a Collaborator for out-of-band interactions and a scanner built on the OWASP ZAP e
- CarterT27/scion
Rust implementation of a source control system inspired by Anthropic's described architecture: history and expensive operations stay on the server, immutable objects are fetched on demand, and clients
- reflection-oss/mirror
A coding agent that runs in the terminal. It reads and edits files, runs commands, and works on parallel tasks in separate repository worktrees. Installable as the reflection-mirror Python package or
- SnowSky1/universal-imagegen-agent
A standalone toolkit that brings the Codex imagegen workflow, prompt library and edit constraints to any agent with shell or Python access. It provides a CLI, Node.js and Python APIs, an installable s
- eecs498-aase/materials
Course repository for an University of Michigan graduate-level software engineering class on agentic AI. It holds lecture and lab slides in Markdown, PDF and PPTX, demo codebases with reset scripts fo