Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
Find dead Python code
- python
- dead-code-removal
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
Find unused and duplicate CSS
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
- dead
- phpstan
- phpstan-rules
- unused-code
Analyzes Elm projects, to help find mistakes before your users find them.
- elm-review
- elm
- elm-lang
- static-code-analysis
A Leiningen plugin for finding dead code
Find missing or unused translations in your Ember.js projects
Spends CPU cycles so you don't spend tokens. The LLM gets a briefing packet instead of a flashlight in a dark room.