Repository Index

ShellCheck, a static analysis tool for shell scripts

• haskell
• shell
• static-analysis
• bash

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

• codemod
• linter
• ast
• babel

✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!

• dependency-analysis
• lint
• maintenance
• typescript

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

Static code analysis for Kotlin

• static
• analysis
• kotlin
• codesmells

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

Staticcheck - The advanced Go linter

• linters
• static-analysis
• linter
• staticcheck

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

• copy-paste
• duplicates
• cpd
• code-quality

It's not just a linter that annoys you!

• static-analysis
• linter
• static-code-analysis
• code-quality

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

• elixir
• code-analysis
• static-analysis
• linter

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

• findbugs
• static-analysis
• code-analysis
• static-code-analysis

A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

• code-analyzer
• code-style
• coding-standards
• formatter

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

• codereview
• reporter
• golang
• golang-tools

A tool for linting and static analysis of Lua code.

• lua
• linter

TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.

• adb
• android
• cli
• kotlin

Static analyzer and linter for Clojure code that sparks joy

• clojure
• clojurescript
• linter
• static-analysis

Linting tool for CloudFormation templates

• continuous-testing
• unit-testing
• cloudformation
• aws

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

NGINX configuration static analyzer

• checker
• configuration
• linter
• linting

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

• security
• sdl
• linter
• visual-studio-code-extension

plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).

• plpgsql
• postgresql
• extension
• c

SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE

• visual-studio
• sonarlint
• sonarqube
• code-quality