slither-analyzer

Install command:
brew install slither-analyzer

Solidity static analysis framework written in Python 3

https://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/

License: AGPL-3.0-only

Development: Pull requests

Formula JSON API: /api/formula/slither-analyzer.json

Formula code: slither-analyzer.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon
golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 0.11.6
head ⚡️ HEAD

Revision: 1

Depends on:

certifi 2026.10.19 Mozilla CA bundle for Python
pydantic 2.14.1 Data validation using Python type hints
python@3.15 3.15.0 Interpreted, interactive, object-oriented programming language

Depends on when building from source:

rust 1.99.1 Safe, concurrent, practical language

Binaries: slither, slither-check-erc, slither-check-kspec, slither-check-upgradeability, slither-doctor, slither-documentation, slither-find-paths, slither-flat, slither-format, slither-interface, slither-mutate, slither-prop, slither-read-storage, slither-simil

Known vulnerabilities in the current version:

GHSA-494j-54xm-rwp3 AIOHTTP: Secure attribute not enforced for shared cookie
GHSA-5wr8-gcqf-gqf3 aiohttp server lacks an initial request/header timeout
GHSA-6cjc-53gc-5rqm AIOHTTP: Connector pool exhaustion via Max-Age overflow
GHSA-9xw5-w5jj-pvcg AIOHTTP: File descriptor exhaustion in multipart requests
GHSA-f9xw-jh8m-3mwq AIOHTTP: Absolute-form request targets can spoof Request.scheme
GHSA-gx76-c99x-2c96 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
GHSA-pqxq-w44r-73xw AIOHTTP: Pure-Python parser request smuggling
GHSA-2g87-pp6c-29x5 aiohttp: Multiple instances of excessive or unbounded memory/CPU use

Data from Homebrew/advisory-database. Run brew vulns slither-analyzer for a live check.

Analytics:

30 days90 days365 days
Installs1273483,271
Installs (--HEAD)001
Installs on Request892181,282
Installs on Request (--HEAD)001
Build Errors0