Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
Repository Index
47,133 repositories indexed
1–24 of 24 · Most stars
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
It's not just a linter that annoys you!
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
- java
- static-analysis
- android
- nullability
A Ruby code quality reporter
- ruby
- static-analysis
- quality-reporter
- metrics
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
Keep your architecture clean.
- architecture
- php
- clean-architecture
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
CodePecker is a tool to detect unused Swift code.
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
- code-quality
- ci-tools
Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
- maven-plugin
- maven
- java
- report
A tool to stop JVM architecture drift before it reaches main. Configurable through yaml; no architecture test code.
- architecture-testing
- code-quality
- dependency-analysis
- github-actions
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
- dependency-analysis
- csharp
- static-code-analysis
- msbuild
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
C code refactoring browser
- c
- refactoring
- static-analysis
- call-graph
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]
- coq
- dependency-graph
- dependency-analysis
- docker-coq-action