Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
Repository Index
65,764 visible repositories in the index
1–19 of 19 · Most stars
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
- laravel
- phpstan
- php
- code-analysis
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
High performance, maintainable stylesheets.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
Detect copy-pasted and structurally similar code
- code-analysis
- duplication
- refactoring
- clean-code
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
- ci
- cli
- developer-tools
- open-source
Find unused and duplicate CSS
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
- hacktoberfest
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
- css
- redundancy-analysis
- cicd
- code-quality
a tool for code clone detection
- go
- tool
- code-clones
- golang
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
- code-review
- developer-tools
- git-diff
- github-actions
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.