Repository Index

ShellCheck, a static analysis tool for shell scripts

• haskell
• shell
• static-analysis
• bash

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

• static-analysis
• static-code-analysis
• java
• go

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

• codemod
• linter
• ast
• babel

✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!

• dependency-analysis
• lint
• maintenance
• typescript

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

Go security checker

• golang
• security
• security-tools
• security-automation

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

• ai
• code-intelligence
• dead-code
• developer-tools

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

A static analysis security vulnerability scanner for Ruby on Rails applications

• ruby
• rails
• security
• static-analysis

High performance, maintainable stylesheets.

• css
• css-modules
• sass

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

• typescript
• ast
• code-generation
• javascript

Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

• code-property-graph
• compiler-theory
• program-analysis
• robdd

Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.

• architecture
• browser-based
• code-analysis
• codebase-visualization

🚀Optimizer for mobile applications

• optimizer
• android
• gradle-plugin
• bytecode-manipulation

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.

• agile
• code-analysis
• dashboard
• data-visualization

A Mac App to find unused images and resources in Xcode project.

• xcode
• unused-resources
• unused

Agent harness to make your slop code well-engineered and beautiful.

• agent-harness

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

• code-analyzer
• code-style
• coding-standards
• formatter

Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.

• architecture
• code-quality
• developer-tools
• mcp

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

• quality
• code-quality
• static-analysis
• formatter

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

• kubernetes
• linter
• ci
• go

A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust

• ci
• cli
• developer-tools
• open-source