47,133 repositories indexed
1–24 of 34 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Go security checker
static analysis of C/C++ code
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
It's not just a linter that annoys you!
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
🚀Optimizer for mobile applications
Roslynator is a set of code analysis tools for C#, powered by Roslyn.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
The repository host gives no description.
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
CodePecker is a tool to detect unused Swift code.
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
Code analyzer for C# and VB.NET projects
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Scan Nix files for dead code
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).