Repository Index

Nginx configuration static analyzer

Static code analysis for Kotlin

• static
• analysis
• kotlin
• codesmells

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

• copy-paste
• duplicates
• cpd
• code-quality

Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

• code-property-graph
• compiler-theory
• program-analysis
• robdd

🚀Optimizer for mobile applications

• optimizer
• android
• gradle-plugin
• bytecode-manipulation

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

NGINX configuration static analyzer

• checker
• configuration
• linter
• linting

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

• security
• sdl
• linter
• visual-studio-code-extension

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

• maven-plugin
• maven
• java
• report

Detect uses of legacy Java APIs

• java
• static-analysis
• maven-plugin
• guava

The Exakat Engine : smart static analysis for PHP

• php
• php7
• gremlin
• neo4j

SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.

Roslyn-based analysis for code using the Serilog logging library. Checks for common mistakes and usage problems.

• serilog
• roslyn
• analysis
• refactor

C code refactoring browser

• c
• refactoring
• static-analysis
• call-graph

A Leiningen plugin for finding dead code

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

Lua code analysis, with plugins for HTML and SciTE

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.

• ai-code-review
• cli
• code-review
• developer-tools

Delphi language plugin for SonarQube

• delphi
• pascal
• sonarqube-plugin
• code-quality

Static analysis tool to prevent logging of sensitive data by detecting struct fields marked as sensitive.