ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
47,133 repositories indexed
1–24 of 58 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Your agent writes bad React. This catches it
- agents
- code-review
- doctor
- react
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
static analysis of C/C++ code
- cppcheck
- c-plus-plus
- static-analysis
- cross-platform
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
- laravel
- phpstan
- php
- code-analysis
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
High performance, maintainable stylesheets.
Awesome autocompletion, static analysis and refactoring library for python
- static-analysis
- auto-complete
- python
- refactoring
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
It's not just a linter that annoys you!
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
- java
- static-analysis
- android
- nullability
Detect copy-pasted and structurally similar code
- code-analysis
- duplication
- refactoring
- clean-code
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
- code-analyzer
- code-style
- coding-standards
- formatter
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.