Add DepWarden — free SCA + SAST scanner (15 languages, no account)

[Rushabh5000]

What is DepWarden?

DepWarden is a free, anonymous SCA + SAST security scanner available as a web tool, zero-install CLI (npx depwarden) and GitHub Action.

SCA (Software Composition Analysis):

• Scans npm, PyPI, Maven, Gradle, Go, Cargo, Ruby, .NET, PHP, Dart, Swift dependencies
• Vulnerability data from OSV, enriched with CISA KEV (active exploitation) and FIRST EPSS (exploit probability)
• Typosquatting and dependency confusion detection
• End-of-life package detection, OpenSSF Scorecard health, license compliance

SAST (Static Application Security Testing):

• 15 languages: JavaScript, TypeScript, Python, Java, Go, PHP, Ruby, C, C++, C#, Rust, Kotlin, Swift, Shell, Scala
• IaC: Terraform/HCL, Dockerfile, Kubernetes YAML, GitHub Actions
• 300+ rules: injection (taint analysis), hardcoded secrets, weak cryptography, framework misconfigurations

Key differentiator: No account required, no source upload — manifest text and source zip only, processed in an isolated workspace.

Links

• Source: https://github.com/Rushabh5000/dep-warden
• Homepage: https://depwarden.in
• License: MIT