njsscan

njsscan is a static application security testing (SAST) tool designed to detect insecure code patterns in Node.js applications utilizing both simple pattern matching from libsast and semantic analysis via semgrep. Its primary use case is to enhance the security posture of Node.js applications by identifying vulnerabilities, with notable features including multiple output formats (such as JSON, SARIF, and HTML) and customizable configurations.