47,133 repositories indexed
1–23 of 23 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
A static analyzer for Java, C, C++, and Objective-C
Continuous Inspection
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
A Ruby code quality reporter
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
grep rough audit - source code auditing tool
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
A cross-platform Vulkan layer which checks Vulkan applications for best practices on Arm Mali devices.