Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
High performance, maintainable stylesheets.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
- hacktoberfest2025
- social-winter-of-code
- codegraph
- codegraphcontext
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
- maven-plugin
- maven
- java
- report
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
Lightweight analysis tool for detecting mutability in Java classes
Context-based security architectural assessment orchestrator
👮Sanitize your Assets.xcassets files
H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
- swift
- swiftsyntax
- clean-architecture
- linter