Automated auditing, performance metrics, and best practices for the web.
- audit
- best-practices
- performance-metrics
- pwa
Repository Index
47,133 repositories indexed
1–23 of 23 · Most stars
A static analysis security vulnerability scanner for Ruby on Rails applications
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
The most opinionated Go source code linter for code audit.
- linter
- golang
- go
- style-checker
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
- agent-orchestrator
- deterministic-replay
- air-gap
- audit-trail
🚀 A RESTful API generator for Node.js
- hapi
- hapi-plugin
- joi
- swagger
Enterprise-oriented Generic Proxy Solutions. Maintenance mode now, please switch to use [VEY](https://github.com/VEY-OSS/vey) for new development efforts
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
Cut AI context cost without trusting the compressor. Every reduction is reversible, byte-exact recoverable, and carries an auditable receipt. Local-first, works through proxy, MCP, SDK, or agent wrapper.
- ai-agents
- claude-code
- mcp
- token-optimization
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Open-source transpiled programming language that helps you write clean code, well-designed systems, and build high-quality software that is testable, auditable and maintainable. Like what you see? Don't forget to star! :star: ^^^
- ddd
- ddd-architecture
- ddd-example
- transpiler
Auditable code review skill for Claude Code and Codex: four independent probes, evidence-backed findings, and a JSON-derived merge gate.
- agent-skills
- ai-code-review
- claude-code
- code-review
Make Java source layout deterministic: reorder class members safely, keep accessors together, format java-source, and enforce style in CI.
- java
- java-code-audit
- java-code-formatter
- java-code-quality
Upkeep — an AI audit crew for your repo. Catches docs/spec/asset drift with evidence; output-only. Claude Code plugin/skill + reusable CI workflow.
Static analysis CLI tool for Magento 2 codebases - detects anti-patterns, code quality issues, and architectural problems. SARIF output for CI/CD integration.
- code-analyzer
- code-quality
- magento
- magento2
The EU & UK compliance plane for Google ADK.
VertaaUX CLI — UX, accessibility, and conversion audits from the terminal (npm: @vertaaux/cli)
- a11y
- accessibility
- axe-core
- ci-cd