PluginStatsSphior Code installs statistics
By SPHIOR · GitHub Marketplace
Security scanning (SAST + SCA) on every pull request, with audit-ready monthly reports for SOC 2 / ISO 27001
Sphior Code has 0 recorded installs on GitHub Marketplace.
It ranks #1307 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About Sphior Code
Sphior Code runs security static analysis (SAST) and dependency scanning (SCA) on every pull request and push, posting findings — with CWE, CVSS, and OWASP mapping — directly to the GitHub Checks tab. Team plans add a monthly, audit-ready PDF report suitable as SOC 2 / ISO 27001 supporting evidence, available in 7 languages (English, Japanese, Spanish, French, German, Portuguese, Chinese). No CI changes and no agents — install the GitHub App and your first scan runs within minutes.
Sphior Code
Security static analysis (SAST) and dependency scanning (SCA) for GitHub, with audit-ready monthly reports for SOC 2 / ISO 27001.
Sphior Code scans every pull request and push, posts findings to the GitHub Checks tab, and rolls them into a monthly PDF your compliance team can use as supporting evidence — in 7 languages (English, Japanese, Spanish, French, German, Portuguese, Chinese). No CI changes, no agents; install the app and your first scan runs within minutes.
Capabilities
• SAST — 12 languages: JavaScript, TypeScript, Python, Go, Java, C#, Ruby, PHP, Rust, Kotlin, Swift, SQL. Findings mapped to CWE, CVSS, and OWASP. • SCA — 8 ecosystems: npm, PyPI, Go, RubyGems, crates.io, Composer, NuGet, Maven. • Detects SQL injection, XSS, hardcoded secrets, insecure crypto, path traversal, SSRF, vulnerable dependencies, and more. • In-PR annotations: Critical/High fail the check, Medium/Low warn; each shows the risk and recommended fix. • Fix faster: open a one-click patch PR, or hand findings to your own AI assistant (Cursor, Claude, Copilot) via MCP — your code stays with you. • Triage dashboard: resolve, accept risk, or mark false positive; every decision is logged. • Monthly reports (Team): findings, trends, MTTR, and remediation status for SOC 2 / ISO 27001 evidence.
Privacy
Source code is analyzed transiently and never permanently stored — only findings and suggested fixes are retained. Webhooks are signature-verified, with per-installation isolation.
Setup
• Install the app and select repositories. • Link your account at sphior.com and pick a plan. • Open a PR — first results return within 1–2 minutes.
Support: support@sphior.com
Description from the GitHub Marketplace listing.
- AI Assisted
- Code review
Where Sphior Code sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/sphior-code. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.