47,133 repositories indexed
1–21 of 21 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Tfsec is now part of Trivy
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Beautiful and understandable static analysis tool for PHP
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
Performs advanced static analysis on PHP code
C Intermediate Language
SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
Lua code analysis, with plugins for HTML and SciTE
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
Static analysis CLI tool for Magento 2 codebases - detects anti-patterns, code quality issues, and architectural problems. SARIF output for CI/CD integration.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.