Open-source security & developer tooling. Vulnerability reports, security graphs and analytics that turn raw scanner output into answers.
projects
Small, sharp, open-source utilities. Each one does a single job and installs in one line.
GitHub traffic analytics
CLI for GitHub traffic, clones, referrers and release downloads. Builds org-wide HTML dashboards and keeps SQLite history beyond GitHub's 14-day window.
brew install fullstackspectrum/gitpulse/gitpulsesecurity graphs
Maps SCA (CVEs, transitive risk, quarantine) and CIEM (members, teams, service accounts) into interactive graphs so teams can trace blast radius and attack paths at a glance.
docker run -d -p 8000:8000 fullstackspectrum/forgely:latestHTML vuln reports
Turn Trivy, Grype, Snyk and Cloudsmith scan JSON into a single self-contained HTML report that works fully offline.
pip install vulnlyrepo vuln summaries
Summarise OSV vulnerability data across Cloudsmith workspaces and repositories, as rich terminal reports or JSON.
uv run assay.py --workspace <workspace>policy log dashboards
Turn Cloudsmith policy decision logs into a terminal report or HTML dashboard: activity over time, noisiest policies, and breakdowns by repo, format and package.
uv run policy-insights --helpabout
Full-Stack-Spectrum is where I build and publish open-source tools for DevSecOps teams — the stuff I wished existed when staring at a wall of scanner JSON.
The focus is on turning noisy data into decisions: which CVEs actually matter, where the blast radius ends, and which policies are doing the work.
Everything ships the easy way — Homebrew, PyPI or a single Docker container — and the Cloudsmith tools are community projects, not affiliated with Cloudsmith.
$ cat profile.yaml name: Full-Stack-Spectrum focus: - software supply chain security - vulnerability analytics - developer experience stack: [python, typescript, docker] ships_via: [brew, pypi, docker hub] status: building $
writing
Issues and PRs are always welcome. If you're using one of these tools in anger, I'd love to hear how.