Repository Index

ShellCheck, a static analysis tool for shell scripts

• haskell
• shell
• static-analysis
• bash

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

• static-analysis
• static-code-analysis
• java
• go

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

• codemod
• linter
• ast
• babel

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

• ai-security
• application-security
• cli
• code-scanning

✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!

• dependency-analysis
• lint
• maintenance
• typescript

Remove unused CSS. Also works with single-page apps.

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

A JavaScript checker and optimizer.

• closure-compiler
• javascript
• optimization
• typechecking

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

• dependency-cruiser
• typescript
• javascript
• static-analysis

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

• copy-paste
• duplicates
• cpd
• code-quality

High performance, maintainable stylesheets.

• css
• css-modules
• sass

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

• typescript
• ast
• code-generation
• javascript

Snyk CLI scans and monitors your projects for security vulnerabilities.

• security
• monitor
• snyk
• vulnerabilities

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

• cli
• code-quality
• dead-code
• developer-tools

JavaScript source code visualization, static analysis, and complexity tool

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

• code-analysis
• query-language
• code-browser
• fuzzy-parsing

Detect copy-pasted and structurally similar code

• code-analysis
• duplication
• refactoring
• clean-code

Visualize various stats about your CSS

Interactive architecture diagrams for codebases

• agents
• aiagentic
• explainability
• llms

A simple code complexity analyser without caring about the C/C++ header files or Java imports, supports most of the popular languages.

Static analysis for Angular projects.

• codelyzer
• angular
• tslint
• linting

WebPerf and front-end quality testing tool

Stylesheet analysis tool.