Repository Index

Lightweight analysis tool for detecting mutability in Java classes

C code refactoring browser

• c
• refactoring
• static-analysis
• call-graph

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

A Leiningen plugin for finding dead code

👮Sanitize your Assets.xcassets files

• script
• ios
• swift
• xcode

H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.

• static-analysis
• ros
• quality-assurance
• robotics

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

gcc-poison

Detects smells and computes metrics of Java code

• code-smells
• metrics
• java
• object-oriented-metrics

apicompat checks recent changes to a Go project for backwards incompatible changes

Lua code analysis, with plugins for HTML and SciTE

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.

• ai-code-review
• cli
• code-review
• developer-tools

A tool for quantitative risk analysis of Android applications based on machine learning techniques

• android
• risk
• android-permissions
• quantitative-risk-analysis

A dotnet CLI to generate type-safe GraphQL clients for F# and Fable with automatic deserialization, static query verification and type checking

• graphql-schema
• dotnet-cli
• fable
• graphql

Delphi language plugin for SonarQube

• delphi
• pascal
• sonarqube-plugin
• code-quality

Spot vulnerabilities in postgres SQL scripts

• postgresql
• security
• python

Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.

Tooling and libraries to enforce zero heap allocations in Golang

Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.

• rust
• postgresql
• linter
• zero-downtime

A cross-platform Vulkan layer which checks Vulkan applications for best practices on Arm Mali devices.

Guess Erlang Application Scattering

• erlang
• beam-files

Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]

• coq
• dependency-graph
• dependency-analysis
• docker-coq-action

An F# wrapper around Cosmos DB's .NET SDK to make it more friendly for F# developers

• cosmosdb
• fsharp
• azure

A collection of static analyzers based on Roslyn that integrate with VS