The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Star History
Momentum
+10
STARS · LAST 30 DAYS
1
PER DAY
#234
MOST-STARRED Kotlin
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +7 | +10 | +90 |
| Per day | 1 | 1 | 1 |
| Forks gained | +1 | +3 | +10 |
opentaint gained 10 stars in the last 30 days, about 1 a day, and now has 160. It is about 1 year old and has averaged roughly 160 stars a year. It ranks #234 among Kotlin repositories and #5,670 across all languages on GitHubRepo.
Trending Record
1
DAYS ON TRENDING
#5266
BEST RANK
Sep 28, 2026
FIRST APPEARANCE
Active
STATUS TODAY
opentaint has maintained a continuous presence across global trending indexes, peaking at #5266. Below is the 30-day activity profile:
💡 Overview
opentaint is an open-source project written in Kotlin: The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Engineered for speed, consistency, and developer ease, it solves common hurdles in agents, ai-security, code-quality. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in Kotlin for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ git clone https://github.com/seqra/opentaint.git
cd opentaint⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
JDK 17+, Kotlin compiler >= 1.9
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
opentaint coordinates its core functionality through a modular Kotlin pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Autonomous AI Agents
Orchestrate intelligent workflows and tool-calling routines with opentaint.
Model Inference & Prompting
Integrate fast, local or cloud-hosted generative AI models directly into production code.
Context Memory & RAG
Augment language models with dynamic vector retrieval and structured project memory.
Developer Productivity
Automate repetitive engineering tasks, code generation, and test creation using AI agents.
🚀 Getting Started
Install opentaint using your package manager: `git clone https://github.com/seqra/opentaint.git`
Initialize your project workspace or configuration file for opentaint.
Import opentaint into your codebase or invoke it directly from your terminal.
Execute your test suite or run `opentaint --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with Kotlin, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
seqra/opentaint is currently ranked #5,670 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #5,652 | projectbluefin/dakota | Python | ★ 161 | Compare ↗ |
| #5,652 | ralph/Spotifly | Swift | ★ 161 | Compare ↗ |
| #5,652 | Swttch/swttch | TypeScript | ★ 161 | Compare ↗ |
| #5,652 | Qbix/webserver | PHP | ★ 161 | Compare ↗ |
| #5,652 | Andrew-Velox/animfetch | Rust | ★ 161 | Compare ↗ |
| #5,670 | seqra/opentaint This Project | Kotlin | ★ 160 | |
| #5,670 | wycats/textmate | Ruby | ★ 160 | Compare ↗ |
| #5,670 | pluginaweek/preferences | Ruby | ★ 160 | Compare ↗ |
| #5,670 | defunkt/markdown-mode | Emacs Lisp | ★ 160 | Compare ↗ |
| #5,670 | sethtrain/django-git | Python | ★ 160 | Compare ↗ |
| #5,670 | heuermh/lick | ChucK | ★ 160 | Compare ↗ |
Frequently Asked Questions
What does opentaint do? +
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
What language is opentaint written in? +
The primary language is Kotlin. Topics include: agents, ai-security, code-quality, cybersecurity, hacking.
Is opentaint actively maintained? +
Yes, the last recorded push was on Sep 28, 2026 with 88 open issues being tracked.
How many stars does opentaint have? +
opentaint has 160 stars and 12 forks on GitHub.
How does opentaint rank among GitHub repositories? +
With 160 stars, seqra/opentaint is ranked #5,670 globally across all repositories tracked on GitHubRepo and #234 among Kotlin projects.
What license is opentaint distributed under? +
The repository reports a Apache-2.0 license. Always verify the repository LICENSE file for legal terms.
