ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
74,362 visible repositories in the index
1–23 of 23 · Most stars
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
- laravel
- phpstan
- php
- code-analysis
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.
- architecture
- browser-based
- code-analysis
- codebase-visualization
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
- code-analyzer
- code-style
- coding-standards
- formatter
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
- architecture
- code-quality
- developer-tools
- mcp
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
- ci
- cli
- developer-tools
- open-source
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
TypeScript Language Service Plugin for GraphQL developers
- typescript
- graphql
- language-server
- plugin
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
- ai-code-review
- cli
- code-review
- developer-tools
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
- code-review
- developer-tools
- git-diff
- github-actions
Delphi language plugin for SonarQube
- delphi
- pascal
- sonarqube-plugin
- code-quality
An F# wrapper around Cosmos DB's .NET SDK to make it more friendly for F# developers
- cosmosdb
- fsharp
- azure
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
- swift
- swiftsyntax
- clean-architecture
- linter
PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.