:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
47,133 repositories indexed
49–55 of 55 · Most stars
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
TranslatedA code audit platform built as a secondary development of artex | Adds local decompilation of Java dependency libraries | Multi-account management
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.