Kahu.app installs statistics

Kahu is a deep source inspector that will go through all required dependencies, direct or indirect, and track API & Extensions usage, hard coded strings - that may be embedded binaries, credentials or something else -, risky function usage - such as eval and shell execution -, newly published CVEs and other signs of malicious behavior/intent.

Under the hood is a specially crafted deep source inspector that goes through all installed dependencies, to identify code that requires attention.

Features:

• Check for Common Vulnerabilities and Exposures; • Risky API usage (eval, sleep, usleep etc); • Bidirectional Control Characters; • Invisible characters; • Zero-width characters; • API usage (File system access, network access etc); • Extension usage; • Environment access; • Super Globals access; • Process control; • Hard-coded URLs, IP Addresses and credentials;

Kahu also provides a Software Bill of Materials (SBOM) on steroids, enhanced with its detection results and risk evaluation.

Description from the GitHub Marketplace listing.