Repository Index

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

Static code analysis for Kotlin

• static
• analysis
• kotlin
• codesmells

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

• cli
• code-quality
• dead-code
• developer-tools

A tool for use with clang to analyze #includes in C and C++ source files

TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.

• adb
• android
• cli
• kotlin

Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.

• business-logic
• code-analysis
• code-understanding
• codebase-analysis

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

PHPStan analysis for Blade templates

A static analysis tool for security

• php
• static-code-analysis
• security-tools
• vulnerability-scanners

SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.

TranslatedA code audit platform built as a secondary development of artex | Adds local decompilation of Java dependency libraries | Multi-account management

Detects smells and computes metrics of Java code

• code-smells
• metrics
• java
• object-oriented-metrics

A dotnet CLI to generate type-safe GraphQL clients for F# and Fable with automatic deserialization, static query verification and type checking

• graphql-schema
• dotnet-cli
• fable
• graphql