⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Catch common Java mistakes as compile-time errors
- java
- static-analysis
Tfsec is now part of Trivy
Awesome autocompletion, static analysis and refactoring library for python
- static-analysis
- auto-complete
- python
- refactoring
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
🔰 Instant PHP quality checks from your console
- php
- static
- analytics
- code
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
- code-quality
- ci-tools
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
A static code analyser for annotated TODO comments
- go
- linters
- todo
- hacktoberfest
Compares two source sets and determines the appropriate semantic versioning to apply.
- php
- semver
- inspection
- ruleset
Detect uses of legacy Java APIs
- java
- static-analysis
- maven-plugin
- guava
Command line program that detects unused resource strings in an iOS or OS X application.
Roslyn-based analysis for code using the Serilog logging library. Checks for common mistakes and usage problems.
- serilog
- roslyn
- analysis
- refactor