mobsfscan

library0.4.5pypypiunverified

mobsfscan is a static analysis tool for finding insecure code patterns in Android and iOS source code. It supports Java, Kotlin, Swift, and Objective-C. Version 0.4.5 released April 2025. Release cadence: irregular.

devops testing auth-security

pip install mobsfscan

github ↗package ↗

INSTALL

IMPORT

SIG · MOBSFSCAN

mobsfscan

devopspythonv0.4.5

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Scans the given directory for insecure code patterns. Outputs results to console.

mobsfscan /path/to/source

mobsfscan --version

Debug

Known issues

gotchamobsfscan is a CLI tool, not a Python library. Importing it in Python code is not supported. Run it as a shell command.

fix

Use subprocess to call mobsfscan, or use the underlying semgrep rules directly.

affects: >=0.1

breakingmobsfscan requires semgrep to be installed. Version 0.4.4+ pins semgrep to 1.86.0. Older versions may break with newer semgrep.

fix

Ensure semgrep 1.86.0 is installed. Run: pip install 'semgrep==1.86.0'

affects: >=0.4.4

deprecatedSupport for Python 3.7 and below may be dropped in future releases.

fix

Upgrade to Python 3.8+.

affects: >=0.4.0

gotchaResults may include false positives. Always review findings manually.

fix

Use the --json or --sarif output to integrate with other tools and filter results.

affects: all

Errors

Common errors & fixes

ModuleNotFoundError: No module named 'semgrep'

semgrep dependency not installed.

fix

pip install semgrep==1.86.0

mobsfscan: command not found

mobsfscan not installed or not in PATH.

fix

pip install mobsfscan

Upgrade

Version history

0.4.5latest on PyPI · released Nov 14, 2024

Audit

Dependencies

No dependency data recorded yet.

Agent activity

10 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/MobSF/mobsfscan ↗

packagehttps://pypi.org/project/mobsfscan/ ↗