47,133 repositories indexed
1–24 of 30 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A static analysis security vulnerability scanner for Ruby on Rails applications
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
High performance, maintainable stylesheets.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
A fist full of code metrics
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
eBPF verifier based on abstract interpretation
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.