{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/13"}],"enrichment":{"capability":"Pysa is a static analysis tool that tracks data flows through Python code to identify security and privacy vulnerabilities like SQL injection and remote code execution, scaling to codebases with millions of lines.","skillfed_tags":["security-analysis","static-analysis","taint-tracking"],"use_cases":["Scan a web application for user input reaching SQL queries or shell commands.","Identify privacy violations where sensitive data flows to external APIs or logs.","Integrate security scanning into CI/CD pipelines via the GitHub Action.","Analyze large Python codebases for data exfiltration or injection vulnerabilities.","Enforce security policies by configuring custom taint sources and sinks for your domain."],"what_it_does":"Pysa is a security-focused static analyzer built on top of Pyrefly, Meta's Python type checker. It works by tracking how untrusted data (sources) flows through your code to dangerous operations (sinks), flagging paths that could lead to security vulnerabilities. The tool is designed to scale to large codebases and uses configurable models to identify sources and sinks relevant to your application.\n\nYou run Pysa after Pyrefly has successfully type-checked your code. It produces a report of potential security and privacy issues without executing your code. The tool ships as part of the pyre-check package and relies on a chain of dependencies including libcst for code parsing, click for CLI, and several typing utilities.","worth_installing":"Yes, if you need automated security scanning for Python. Pysa is actively maintained, has no known vulnerabilities, and scales to large codebases. Install it when your team wants continuous data-flow analysis without manual code review. Requires Python 3.9+, Pyrefly setup, and willingness to configure models for your specific threats."},"id":"pyre-check","links":{"html":"https://skillfed.io/packages/pyre-check","md":"https://skillfed.io/packages/pyre-check.md","pypi":"https://pypi.org/project/pyre-check/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-06","license_spdx":null,"license_treatment":"permissive","name":"pyre-check","python_support":"supports_current","summary":"A performant type checker and security-focused static analyzer for Python"},"popularity":{"monthly_downloads":238446,"position":8937,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.10.0"}