✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Repository Index
56,638 visible repositories in the index
1–22 of 22 · Most stars
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
- semmle-ql
- codeql
- github-advanced-security
- github-security-lab
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
Staticcheck - The advanced Go linter
- linters
- static-analysis
- linter
- staticcheck
High performance, maintainable stylesheets.
Awesome autocompletion, static analysis and refactoring library for python
- static-analysis
- auto-complete
- python
- refactoring
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
- agile
- code-analysis
- dashboard
- data-visualization
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Performs advanced static analysis on PHP code
A high-performance static analysis toolkit for Ruby
- ruby
- static-analysis
- type-checking
H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.
- static-analysis
- ros
- quality-assurance
- robotics
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker