mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
MobSF/mobsfscan is drawing steady momentum at +0.1 stars/day (13th percentile in the tracked cohort), for a momentum score of 32.5/100. A recent release is helping fuel the run.
Low breakout odds over the next 14 days, led by push recency (70th pctl). Confidence is moderate given the available history.
Reconstructed from 13 snapshots — the time-series GitHub’s API doesn’t expose.
Release count rose to 33.
Live score, refreshed every 6 hours. Links back to this page.
[](https://repoclimb.com/repo/MobSF/mobsfscan)Transparent heuristic · logged for model training
Percentile rank within the tracked cohort. The score self-calibrates — it answers “accelerating vs. everything else,” not raw size.