47,133 repositories indexed
1–24 of 97 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
A static analyzer for Java, C, C++, and Objective-C
Your agent writes bad React. This catches it
PHP Static Analysis Tool - discover bugs in your code without running it!
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Continuous Inspection
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
Bandit is a tool designed to find common security issues in Python code.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Static code analysis for Kotlin
Tfsec is now part of Trivy
static analysis of C/C++ code
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
It's not just a linter that annoys you!
🔰 Instant PHP quality checks from your console
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
An extensible multilanguage static code analyzer.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.