ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
47,133 repositories indexed
1–24 of 47 · Most stars
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Static code analysis for Kotlin
- static
- analysis
- kotlin
- codesmells
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
Staticcheck - The advanced Go linter
- linters
- static-analysis
- linter
- staticcheck
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
It's not just a linter that annoys you!
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
- elixir
- code-analysis
- static-analysis
- linter
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
- java
- static-analysis
- android
- nullability
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
- code-analyzer
- code-style
- coding-standards
- formatter
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
- static-analysis
- software-verification
- abstract-interpretation
- program-analysis
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
A tool for linting and static analysis of Lua code.
- lua
- linter
Static analyzer and linter for Clojure code that sparks joy
- clojure
- clojurescript
- linter
- static-analysis
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
- attack-surfaces
- pentesting
- security
- devsecops
NGINX configuration static analyzer