A framework of IDE extensions and language analysers that provide inline security analysis in the dev environment as the developer writes code. It has a flexible rule model that supports multiple programming languages. The goal is to notify the developer as they are introducing a security vulnerability in order to fix the issue at the point of introduction, and to help build awareness for the developer.
Note that as of 7 February 2026, the recentmost version that Winget can create a package for is 1.0.59 despite the existence of a v1.0.70, as binaries had not been officially prebuilt for versions past 1.0.59.
Publisher’s description
What is DevSkim CLI (Library package)?
DevSkim CLI (Library package) by Microsoft is open-source Windows software in the developer utilities category. It is written in C#.
Installation and requirements
The publisher provides Portable installers for 64-bit Windows. It runs without installation (portable).
Popularity and file types
The source code on GitHub (microsoft/DevSkim) has 1,015 stars. Similar programs include WinMerge, jq and x64dbg.
Project description on GitHub: “DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
Cons
- No native ARM64 build
- No update for more than a year
In short: DevSkim CLI (Library package) is an open-source developer utilitie tool for 64-bit PCs. Updates have slowed down.
Is DevSkim CLI (Library package) safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
746EBBC8FC5330E9671CB8BCCD50FE8D6C89852127CE334F1C0D8B3092BC9F32· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 1.0.59Latest | June 12, 2025 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id Microsoft.DevSkim.CLI.LibraryPackage -eRelated guide: How to use winget: install and update apps
Information
- Publisher
- Microsoft
- Category
- Developer utilities
- Licence
- MIT
- Price
- Free
- Source code
- github.com/microsoft/DevSkim
- Written in
- C#
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 1.0.59
- Released
- June 12, 2025
- Added to the catalogue
- February 12, 2026
- Versions listed
- 1
- GitHub stars
- 1,015
- GitHub forks
- 133
- Website
- github.com
- winget ID
- Microsoft.DevSkim.CLI.LibraryPackage
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to DevSkim CLI (Library package)
See all ›-
Open source1.2M ↓ -
Open source5.1M ↓ -
x64dbg2026.05.27An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.Open source95.8K ↓ -
Open source28.3K ↓ -
Biome2.6.3Biome is a toolchain for web projects, aimed at providing functionalities to maintain them. It offers a formatter and linter, usable via CLI and LSP.Open source10.5K ↓ -
Open source18.8K ↓ -
Open source15.7K ↓ -
Open source12.2K ↓
Frequently asked questions
Is DevSkim CLI (Library package) free?
Yes. DevSkim CLI (Library package) is open-source software under the MIT licence.
Is DevSkim CLI (Library package) safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install DevSkim CLI (Library package) with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does DevSkim CLI (Library package) run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Can I use DevSkim CLI (Library package) without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to DevSkim CLI (Library package)?
WinMerge, jq, x64dbg, Vale and Biome. The alternatives page compares them.
