DevSkim CLI (Library package)

Microsoft · Microsoft.DevSkim.CLI.LibraryPackage

A framework of IDE extensions and language analyzers that provide inline security analysis in the dev environment as the developer writes code.

A framework of IDE extensions and language analyzers that provide inline security analysis in the dev environment as the developer writes code. It has a flexible rule model that supports multiple programming languages. The goal is to notify the developer as they are introducing a security vulnerability in order to fix the issue at the point of introduction, and to help build awareness for the developer. Note that as of February 7, 2026, the recentmost version that Winget can create a package for is 1.0.59 despite the existence of a v1.0.70, as binaries had not been officially prebuilt for versions past 1.0.59.