Python · AGPL-3.0
Pantheon-Security/medusa
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.
★ 1k
Stars
154 forks · 3 open issues
+1.0/wk
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
17.6
Momentum / 100
see the breakdown below
11mo ago
Created
last push 2mo ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 1.1 | +1.0/wk, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 0.0 | last week ran 0.31× the monthly pace |
| Freshness | 15 | 7.8 | last push 2mo ago; decays to zero at 180 days |
| Scale | 15 | 8.7 | 1k stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 17.6 | sum of the above |
Detail
| Topics | agent-securityai-securitycode-analysiscve-detectiondevsecopsllm-securitymcpnextjsopen-sourcepythonreactsastscannersecuritysecurity-toolsstatic-analysisvulnerability-scanner |
| Matched on | Security (security, security-tools) |
| Short window | +1 stars over 7 days = 0.1/day |
| Long window | +12 stars over 26 days = 0.5/day |
| Lifetime average | 2.85 stars/day over 355 days |
| First seen here | 2026-10-11 |
| Last read | 2d ago |