59,621 visible repositories in the index
1–24 of 67 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Continuous Inspection
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A static analysis security vulnerability scanner for Ruby on Rails applications
Static analysis for GitHub Actions (and more)
Staticcheck - The advanced Go linter
static analysis of C/C++ code
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Snyk CLI scans and monitors your projects for security vulnerabilities.
An extensible multilanguage static code analyzer.
Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
🚀Optimizer for mobile applications
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Detect copy-pasted and structurally similar code
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
Manage translation and localization with static analysis, for Ruby i18n
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.