Repository Index

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

• automation
• cli
• coding-standards
• php

Next-gen phpDoc parser with support for intersection types and generics

• phpstan
• static-analysis
• php
• php7

Linting tool for CloudFormation templates

• continuous-testing
• unit-testing
• cloudformation
• aws

✔️ PHP Architecture Tester - Easy architecture testing for PHP

• php
• static-analysis
• testing
• architecture

Python Type Checker / Language Server

• autocompletion
• language-server-protocol
• mypy
• python

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.

• agent-skills
• ai-agents
• ai-code-review
• claude-code

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Code analyzer for C# and VB.NET projects

• c-sharp
• sonarqube
• static-analysis
• static-analyzer

awesome llvm security [Welcome to PR]

• llvm
• ollvm
• clang
• obfuscate

Code style checking for RSpec files.

• ruby
• rubocop
• lint
• testing

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis

CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.

• static-analysis
• code-comprehension
• cpp
• code-analysis

PHP Magic Number Detector

• php
• cli
• automation
• static-analysis

A static code analysis tool for Crystal

• crystal
• linter
• ameba
• code-analysis

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

• maven-plugin
• maven
• java
• report

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.

• dead
• phpstan
• phpstan-rules
• unused-code

Detect non-inclusive language in your source code.

• inclusive
• inclusive-language
• linter
• golang

SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE

• visual-studio
• sonarlint
• sonarqube
• code-quality

A modern supercompiler for call-by-value functional languages

• compiler
• functional
• functional-programming
• language

Chronos - A static race detector for the go language

• analysis
• golang
• synchronization
• detection

Detect uses of legacy Java APIs

• java
• static-analysis
• maven-plugin
• guava