Repository Index

Roslynator is a set of code analysis tools for C#, powered by Roslyn.

• csharp
• roslyn
• visual-studio
• dotnet

A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects

• csharp-sourcegenerator
• hacktoberfest
• patterns
• contributions-welcome

Code analyzer for C# and VB.NET projects

• c-sharp
• sonarqube
• static-analysis
• static-analyzer

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

The Exakat Engine : smart static analysis for PHP

• php
• php7
• gremlin
• neo4j

Lint tool for F#

• fsharp
• lint
• linter
• dotnet

NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.

• dependency-analysis
• csharp
• static-code-analysis
• msbuild

H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.

• static-analysis
• ros
• quality-assurance
• robotics

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

Detects smells and computes metrics of Java code

• code-smells
• metrics
• java
• object-oriented-metrics

A dotnet CLI to generate type-safe GraphQL clients for F# and Fable with automatic deserialization, static query verification and type checking

• graphql-schema
• dotnet-cli
• fable
• graphql

Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.

An F# wrapper around Cosmos DB's .NET SDK to make it more friendly for F# developers

• cosmosdb
• fsharp
• azure

Smell detection tool for Puppet code

The MongoDB Analyzer is a free tool that helps you understand how your code translates into the MongoDB Query API.

• c-sharp
• csharp
• dotnet
• linq

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Database smell detector

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

• ai-agents
• ai-code-review
• authorization
• bola