Repository Index

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

• codemod
• linter
• ast
• babel

✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!

• dependency-analysis
• lint
• maintenance
• typescript

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

• semmle-ql
• codeql
• github-advanced-security
• github-security-lab

🐳 A most popular sql audit platform for mysql

• mysql
• devops
• sql
• yearning

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

• ai
• code-intelligence
• dead-code
• developer-tools

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

• code-property-graph
• compiler-theory
• program-analysis
• robdd

Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.

• architecture
• browser-based
• code-analysis
• codebase-visualization

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

• cli
• code-quality
• dead-code
• developer-tools

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

• elixir
• code-analysis
• static-analysis
• linter

Find dead Python code

• python
• dead-code-removal

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.

• agile
• code-analysis
• dashboard
• data-visualization

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

• static-analysis
• software-characterization
• application-inspector
• detection

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

• java
• static-analysis
• android
• nullability

Agent harness to make your slop code well-engineered and beautiful.

• agent-harness

Detect copy-pasted and structurally similar code

• code-analysis
• duplication
• refactoring
• clean-code

TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.

• adb
• android
• cli
• kotlin

Keep your architecture clean.

• architecture
• php
• clean-architecture

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

Beautiful and understandable static analysis tool for PHP

• static-analyzer
• quality
• php
• metrics

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

• mess-detector
• php
• pmd
• static-analysis

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer