47,133 repositories indexed
1–24 of 41 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
PHP Static Analysis Tool - discover bugs in your code without running it!
Bandit is a tool designed to find common security issues in Python code.
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
High performance, maintainable stylesheets.
Awesome autocompletion, static analysis and refactoring library for python
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
🚀Optimizer for mobile applications
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Roslynator is a set of code analysis tools for C#, powered by Roslyn.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
grep rough audit - source code auditing tool
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code