Repository Index

A static analyzer for Java, C, C++, and Objective-C

• static-analysis
• static-code-analysis
• code-quality
• java

Continuous Inspection

• sonarqube
• code-quality
• static-analysis

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

• ai
• code-intelligence
• dead-code
• developer-tools

Static code analysis for Kotlin

• static
• analysis
• kotlin
• codesmells

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

⚗️ Adds code analysis to Laravel improving developer productivity and code quality.

• laravel
• phpstan
• php
• code-analysis

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

• copy-paste
• duplicates
• cpd
• code-quality

It's not just a linter that annoys you!

• static-analysis
• linter
• static-code-analysis
• code-quality

🔰 Instant PHP quality checks from your console

• php
• static
• analytics
• code

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

• cli
• code-quality
• dead-code
• developer-tools

A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C

A Ruby code quality reporter

• ruby
• static-analysis
• quality-reporter
• metrics

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

• codereview
• reporter
• golang
• golang-tools

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Beautiful and understandable static analysis tool for PHP

• static-analyzer
• quality
• php
• metrics

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

• mess-detector
• php
• pmd
• static-analysis

TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards

• mysql
• sql-audit
• sql
• audit

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

• code-quality
• ci-tools

Code analyzer for C# and VB.NET projects

• c-sharp
• sonarqube
• static-analysis
• static-analyzer

plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).

• plpgsql
• postgresql
• extension
• c

A fist full of code metrics

• code-quality
• hacktoberfest
• maintainability
• software-quality