47,133 repositories indexed
1–24 of 35 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
The best way of working with Protocol Buffers.
Catch common Java mistakes as compile-time errors
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Code analyzer for C# and VB.NET projects
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
Compares two source sets and determines the appropriate semantic versioning to apply.
C Intermediate Language