MobSF/mobsfscan
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
- Stars
- 797
- Forks
- 128
- Language
- Python
- License
- LGPL-3.0
- Last commit
- updated Oct 2026
Straight from GitHub
Nobody has written up this repo. Everything on this page comes straight from the GitHub API, so there is no founder write-up, no pros and cons, and no difficulty rating — rather than a generated guess at them.
Maintenance
Pushed within three months of the last stats read (as of Nov 6, 2026).
Licence
LGPL-3.0
Tech stack
Primary language: Python. GitHub reports only the dominant language, so this is not the whole stack.
Install
No install command has been verified for this repo. Follow the README rather than a guess.
Quality score
Computed by the discovery import when this entry was added.
- Recent activity×0.30
- 1.00
How recently the default branch was pushed to.
- Adoption×0.20
- 0.62
Stars on a log scale, so adoption counts without dominating.
- Description and topics×0.15
- 0.80
Whether the repo describes itself: description, topics, homepage.
- README present×0.15
- 1.00
Whether the repository has a README at all.
- Licence clarity×0.10
- 1.00
Whether GitHub can resolve the licence to a recognised SPDX id.
- Issue health×0.10
- 1.00
Open issues relative to adoption, as a rough maintenance signal.
Similar repos
Same category, ranked by shared topics.
Measure helps mobile teams monitor and fix crashes, ANRs, bugs, and performance issues. The open source alternative to Firebase Crashlytics.
1.4k starsTypeScriptApache-2.0updated Nov 2026Analytics & BIThe Swift (and Objective-C) testing framework.
9.8k starsSwiftApache-2.0updated May 2026Developer ToolsCheckstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
9.6k starsJavaLGPL-2.1updated Nov 2026Developer ToolsGhidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
6.1k starsJavaApache-2.0updated Nov 2026Developer Tools
Stats updated Nov 6, 2026. Stars, forks, issue counts, and dates are a snapshot read from the GitHub REST API, not a live figure. This site makes no requests to GitHub when you load a page.