Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
Repository Index
59,132 visible repositories in the index
1–24 of 44 · Most stars
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
- semmle-ql
- codeql
- github-advanced-security
- github-security-lab
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
- dependency-cruiser
- typescript
- javascript
- static-analysis
Static analysis for GitHub Actions (and more)
static analysis of C/C++ code
- cppcheck
- c-plus-plus
- static-analysis
- cross-platform
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.
- architecture
- browser-based
- code-analysis
- codebase-visualization
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
- cli
- code-quality
- dead-code
- developer-tools
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
- agile
- code-analysis
- dashboard
- data-visualization
JavaScript source code visualization, static analysis, and complexity tool
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
- static-analysis
- software-characterization
- application-inspector
- detection
A Mac App to find unused images and resources in Xcode project.
- xcode
- unused-resources
- unused
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
Keep your architecture clean.
- architecture
- php
- clean-architecture
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer