{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"},{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/2"}],"enrichment":{"capability":"libsast is a static application security testing library that scans code using regex-based pattern matching and semantic analysis to find security issues.","skillfed_tags":["security-scanning","code-analysis","ci-cd-integration"],"use_cases":["Integrate security scanning into CI/CD pipelines to catch vulnerabilities before code is merged.","Build custom security analysis tools that apply organization-specific patterns to codebases.","Scan mobile or web application code for known dangerous APIs and insecure patterns.","Generate compliance reports by running predefined rule sets across multiple projects.","Automate security code reviews by detecting common misconfigurations and hardcoded secrets."],"what_it_does":"libsast is a Python library that brings static security analysis to your codebase through regex-based pattern matching and semantic-aware analysis. You define security patterns in YAML files and point libsast at your code; it returns a JSON report with matched findings, line numbers, and metadata like CWE and severity classifications.\n\nThe library is designed for security engineers who need programmatic access to SAST capabilities rather than a standalone tool. It depends on billiard for task distribution, pyyaml for rule parsing, and requests for network operations. The pattern matcher supports complex logical rules (AND, OR, NOT combinations). Both engines can be used independently or together, with pattern matching available cross-platform and semantic analysis available on Mac and Linux.","worth_installing":"Yes, if you need programmatic SAST capabilities. The library is actively maintained, has no known vulnerabilities, and supports current Python versions (3.10 through 3.14). The copyleft license is acceptable for most open-source and internal use but requires review for proprietary distribution. Install friction is low. Best suited for teams building security tooling or integrating scanning into automated workflows."},"id":"libsast","links":{"html":"https://skillfed.io/packages/libsast","md":"https://skillfed.io/packages/libsast.md","pypi":"https://pypi.org/project/libsast/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-10","license_spdx":null,"license_treatment":"copyleft","name":"libsast","python_support":"supports_current","summary":"A generic SAST library built on top of semgrep and regex"},"popularity":{"monthly_downloads":383550,"position":7076,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.1.8"}