What it can do to you, before you run it. Reads an installer, a package.json, a Dockerfile, and says what it does and, separately, what it leaves behind. No uploads, no lookups, no telemetry.
shell bash cli golang security parser privacy installer static-analysis supply-chain no-dependencies appsec opsec devsecops privacy-tools curl-bash
-
Updated
Sep 2, 2026 - Go