47,133 repositories indexed
1–21 of 21 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Your agent writes bad React. This catches it
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Staticcheck - The advanced Go linter
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
Roslynator is a set of code analysis tools for C#, powered by Roslyn.
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
Static analyzer and linter for Clojure code that sparks joy
The repository host gives no description.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
Code analyzer for C# and VB.NET projects
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
A static code analyser for annotated TODO comments
Command line program that detects unused resource strings in an iOS or OS X application.
Lint tool for F#
An Elixir tool for checking safety of database migrations.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
A cross-platform Vulkan layer which checks Vulkan applications for best practices on Arm Mali devices.