Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Your agent writes bad React. This catches it
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Awesome autocompletion, static analysis and refactoring library for python
Detect copy-pasted and structurally similar code
- code-analysis
- duplication
- refactoring
- clean-code
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
- maven-plugin
- maven
- java
- report
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
- dead
- phpstan
- phpstan-rules
- unused-code
Chronos - A static race detector for the go language
- analysis
- golang
- synchronization
- detection
Roslyn-based analysis for code using the Serilog logging library. Checks for common mistakes and usage problems.
- serilog
- roslyn
- analysis
- refactor
An Elixir tool for checking safety of database migrations.
Lightweight analysis tool for detecting mutability in Java classes
C code refactoring browser