UBEL — Supply-Chain & Secrets Scanner

Manifest

Metadata

Namespace

Arcane-Spark

Name

ubel-vscode

License

SEE LICENSE IN LICENSE.md

Homepage

https://github.com/AlaBouali/ubel

Repository

https://github.com/AlaBouali/ubel.git

Reviews

0

Taxonomy

Categories

Description

Multi-ecosystem software composition analysis (SCA), secrets detector, and license/compliance scanner. Scans Node.js, Python, PHP, Rust, Go, C#/.NET, Java/Kotlin, and Ruby projects — plus your VS Code/Cursor extensions, exposed secrets, and the host developer machine — for known vulnerabilities (OSV.dev + NVD), malicious packages, hardcoded credentials, and license risk. Every finding is annotated with reachability analysis and mapped onto OWASP Top 10, PCI DSS, HIPAA, SOC 2, ISO/IEC 27001, NIST SP 800-53, GDPR, and CIS Controls v8, with CycloneDX SBOM + SARIF report output. Runs entirely locally in report-only mode — no cloud calls except osv.dev and NVD API (both mirror-configurable).