github.com/derailed/popeye

Capability analysis allows users to understand what privileged functionality a software library (or its dependencies) might use, to highlight unexpected or sensitive capabilities. This analysis uses Capslock callgraph analysis to identify callsites with access to privileged standard library operations.