medusa

AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet.claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup. Maintained by Pantheon-Security on GitHub, where it has earned 976 stars from the community.

It's actively developed around devsecops, open-source, python, and is a solid reference for anyone building with these tools.