47,133 repositories indexed
1–24 of 48 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Make your diffs human readable for improved code quality and faster defect detection. :tada:
Memray is a memory profiler for Python
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
JSHint is a tool that helps to detect errors and potential problems in your JavaScript code
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Code smell detector for Ruby
Detect copy-pasted and structurally similar code
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
grep rough audit - source code auditing tool
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
Profiling / Debugging assist tools for iOS. (Memory Leak, OOM, ANR, Hard Stalling, Network, OpenGL, Time Profile ...)
CodePecker is a tool to detect unused Swift code.
Magic number detection for JavaScript
Lint an npm or yarn lockfile to analyze and detect security issues
PHP Magic Number Detector
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
Detect non-inclusive language in your source code.
Chronos - A static race detector for the go language
Upload once to create multiple, relative PRs. Productivity-focused git tools with patch revision tracking, rebase detection and more. Uses python and git plumbing commands.
Detect uses of legacy Java APIs