Repository Index

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

Beautiful and understandable static analysis tool for PHP

• static-analyzer
• quality
• php
• metrics

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

• mess-detector
• php
• pmd
• static-analysis

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.

• dead
• phpstan
• phpstan-rules
• unused-code

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

SPARK 2014 is the new version of SPARK, a software development technology specifically designed for engineering high-reliability applications.

Delphi language plugin for SonarQube

• delphi
• pascal
• sonarqube-plugin
• code-quality