Decision Workspace
overreach vs zizmor vs nyx-scanner
Side-by-side comparison of Rust crates
41
overreach
experimentalv0.3.0
Catch code that overreaches its capabilities — network calls, subprocess spawns, sensitive-file reads, curl|sh, and hardcoded secrets — in a diff, file, or repo.
60
zizmor
stablev1.26.1
Static analysis for GitHub Actions
51
nyx-scanner
growingv0.7.0
A multi-language static analysis tool for detecting security vulnerabilities
Core Metrics
| overreach | zizmor | nyx-scanner | |
|---|---|---|---|
| Health Score | 41 | 60 | 51 |
| Total Downloads | 17 | 207.5K | 982 |
| 30d Downloads | 0 | 10.2K | 0 |
| Dependents | 0 | 0 | 0 |
| Releases | 1 | 80 | 9 |
| Last Updated | 33d ago | 23d ago | 63d ago |
| Age | 1m | 1y 8m | 1y |
Health Breakdown
overreach
Maintenance
11
Quality
13
Community
6
Popularity
1
Documentation
10
zizmor
Maintenance
18
Quality
17
Community
6
Popularity
6
Documentation
13
nyx-scanner
Maintenance
15
Quality
11
Community
6
Popularity
4
Documentation
15
Technical Details
| overreach | zizmor | nyx-scanner | |
|---|---|---|---|
| Version | 0.3.0 | 1.26.1 | 0.7.0 |
| Stable (≥1.0) | ✗ No | ✓ Yes | ✗ No |
| License | MIT | MIT | GPL-3.0-or-later |
| Dependencies | 4 | 54 | 53 |
| Crate Size | 46KB | 367KB | 3.3MB |
| Features | 0 | 7 | 5 |
| Yanked % | 0.0% | 0.0% | 0.0% |
| Edition | 2021 | 2024 | 2024 |
| MSRV | — | — | 1.88 |
| Owners | 1 | 1 | 1 |
Links
Quick Verdict
- •zizmor leads with a health score of 60/100, but none of the options score above 80.
- •overreach, nyx-scanner are pre-1.0 — API may change.