Repository Index

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

• static-analysis
• static-code-analysis
• java
• go

Go security checker

• golang
• security
• security-tools
• security-automation

🐳 A most popular sql audit platform for mysql

• mysql
• devops
• sql
• yearning

[mirror] Go Tools

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

• copy-paste
• duplicates
• cpd
• code-quality

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

• elixir
• code-analysis
• static-analysis
• linter

Pretty good call graphs for dynamic languages

Verified Rust for low-level systems code

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

• code-analysis
• query-language
• code-browser
• fuzzy-parsing

Dafny is a verification-aware programming language

• programming-language
• verification

Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.

• architecture
• code-quality
• developer-tools
• mcp

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

• codereview
• reporter
• golang
• golang-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

Interactive architecture diagrams for codebases

• agents
• aiagentic
• explainability
• llms

A simple code complexity analyser without caring about the C/C++ header files or Java imports, supports most of the popular languages.

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.

• android
• app-store
• app-store-review
• cli

KunLun-M — Open-source static code analysis for PHP, Nodejs/JavaScript, Python, Golang, Java and C/C++, with AST-based semantic scanning and one-click AI Agent integration (OpenClaw, Codex, Claude Code, Hermes, and more).

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

• security
• sdl
• linter
• visual-studio-code-extension

Scan Nix files for dead code

• nix
• nixos
• nix-flake
• nix-lang

plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).

• plpgsql
• postgresql
• extension
• c

TypeScript Language Service Plugin for GraphQL developers

• typescript
• graphql
• language-server
• plugin