Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
A static analyzer for Java, C, C++, and Objective-C
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
Catch common Java mistakes as compile-time errors
- java
- static-analysis
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
- java
- static-analysis
- android
- nullability
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
Detect copy-pasted and structurally similar code
- code-analysis
- duplication
- refactoring
- clean-code
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
Find unused and duplicate CSS
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
- maven-plugin
- maven
- java
- report
Detect uses of legacy Java APIs
- java
- static-analysis
- maven-plugin
- guava
TranslatedA code audit platform built as a secondary development of artex | Adds local decompilation of Java dependency libraries | Multi-account management
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
Lightweight analysis tool for detecting mutability in Java classes
Detects smells and computes metrics of Java code
- code-smells
- metrics
- java
- object-oriented-metrics
Delphi language plugin for SonarQube
- delphi
- pascal
- sonarqube-plugin
- code-quality