SecureStack

SecureStack is a security auditing platform that is based on FOSS and is used to analyze GitHub open-source repositories for common security issues and code risks. SecureStack scans the source files and dependency manifests to identify common issues such as hard-coded secrets, insecure library versions, dangerous programming practices, and licensing issues. SecureStack provides a detailed report that includes a security score, a detailed list of identified security issues, and a list of suggested fixes to help the developer fix the issues before deployment. SecureStack is a lightweight backend scanner and a front-end dashboard that aims to simplify security audits of open-source repositories.