01Detects insecure flags in configurations (config-scan)
02Checks dependencies against the OSV.dev vulnerability database (vuln-scan)
030 GitHub stars
04Detects hardcoded secrets with secret-scan
05Warns on missing timeouts in HTTP requests (http-timeout-scan)
06Prevents typosquatting with secure-install