Repository Index

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

• static-analysis
• static-code-analysis
• java
• go

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

High performance, maintainable stylesheets.

• css
• css-modules
• sass

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code

Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

A high-performance static analysis toolkit for Ruby

• ruby
• static-analysis
• type-checking

A tool to stop JVM architecture drift before it reaches main. Configurable through yaml; no architecture test code.

• architecture-testing
• code-quality
• dependency-analysis
• github-actions

SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.

Lightweight analysis tool for detecting mutability in Java classes

H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.

• static-analysis
• ros
• quality-assurance
• robotics

Spends CPU cycles so you don't spend tokens. The LLM gets a briefing packet instead of a flashlight in a dark room.

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

• ai-agents
• ai-code-review
• authorization
• bola