Repository Index

static analysis of C/C++ code

• cppcheck
• c-plus-plus
• static-analysis
• cross-platform

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

• cli
• code-quality
• dead-code
• developer-tools

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

• security
• sdl
• linter
• visual-studio-code-extension

plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).

• plpgsql
• postgresql
• extension
• c

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

• maven-plugin
• maven
• java
• report

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.

• dead
• phpstan
• phpstan-rules
• unused-code

SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE

• visual-studio
• sonarlint
• sonarqube
• code-quality

Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.

• ai-agents
• ai-skills
• antigravity
• ast

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.

• dependency-analysis
• csharp
• static-code-analysis
• msbuild

Tooling and libraries to enforce zero heap allocations in Golang

Spends CPU cycles so you don't spend tokens. The LLM gets a briefing packet instead of a flashlight in a dark room.