Repository Index

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

• elixir
• code-analysis
• static-analysis
• linter

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

• java
• static-analysis
• android
• nullability

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

• findbugs
• static-analysis
• code-analysis
• static-code-analysis

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

• python
• python3
• static-analysis
• static-code-analysis

Detect copy-pasted and structurally similar code

• code-analysis
• duplication
• refactoring
• clean-code

⚙️ The static code analysis tool you need for your HTML

• htmlhint
• html
• hint
• code-quality

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

Documentation and issues for Pylance

• python
• language-server
• language-server-protocol
• code-analysis

Manage translation and localization with static analysis, for Ruby i18n

• static-analysis
• static-code-analysis
• ruby
• i18n

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

• code-analysis
• code-transformation
• metaprogramming
• code-generation

Next-gen phpDoc parser with support for intersection types and generics

• phpstan
• static-analysis
• php
• php7

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.

• dynamic
• analysis
• dynamic-code-analysis
• dynamic-analysis

Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.

• business-logic
• code-analysis
• code-understanding
• codebase-analysis

Code analyzer for C# and VB.NET projects

• c-sharp
• sonarqube
• static-analysis
• static-analyzer

A RuboCop extension focused on enforcing Rails best practices and coding conventions.

• ruby
• rubocop
• linter
• static-code-analysis

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

• bugbounty
• security
• security-tools
• mobile-security

An extension of RuboCop focused on code performance checks.

• ruby
• rubocop
• linter
• static-code-analysis

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.

• static-analysis
• code-comprehension
• cpp
• code-analysis

A static code analysis tool for Crystal

• crystal
• linter
• ameba
• code-analysis

Code graph and memory for your coding agents, in one Rust program. For Claude Code, Codex, Cursor and any MCP client.

• agent-memory
• ai-agents
• claude-code
• code-analysis