Repository Index

ShellCheck, a static analysis tool for shell scripts

• haskell
• shell
• static-analysis
• bash

✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!

• dependency-analysis
• lint
• maintenance
• typescript

High performance, maintainable stylesheets.

• css
• css-modules
• sass

Roslynator is a set of code analysis tools for C#, powered by Roslyn.

• csharp
• roslyn
• visual-studio
• dotnet

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code

A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects

• csharp-sourcegenerator
• hacktoberfest
• patterns
• contributions-welcome

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

• attack-surfaces
• pentesting
• security
• devsecops

CodePecker is a tool to detect unused Swift code.

NGINX configuration static analyzer

• checker
• configuration
• linter
• linting

Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.

• business-logic
• code-analysis
• code-understanding
• codebase-analysis

Code analyzer for C# and VB.NET projects

• c-sharp
• sonarqube
• static-analysis
• static-analyzer

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

• maven-plugin
• maven
• java
• report

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.

• dead
• phpstan
• phpstan-rules
• unused-code

Command line program that detects unused resource strings in an iOS or OS X application.

A high-performance static analysis toolkit for Ruby

• ruby
• static-analysis
• type-checking

Lint tool for F#

• fsharp
• lint
• linter
• dotnet

NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.

• dependency-analysis
• csharp
• static-code-analysis
• msbuild

Useful tools for Sorbet enthusiasts

• sorbet
• typing
• coverage
• lsp

👮Sanitize your Assets.xcassets files

• script
• ios
• swift
• xcode

Detects smells and computes metrics of Java code

• code-smells
• metrics
• java
• object-oriented-metrics

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.

• ai-code-review
• cli
• code-review
• developer-tools

A dotnet CLI to generate type-safe GraphQL clients for F# and Fable with automatic deserialization, static query verification and type checking

• graphql-schema
• dotnet-cli
• fable
• graphql

An F# wrapper around Cosmos DB's .NET SDK to make it more friendly for F# developers

• cosmosdb
• fsharp
• azure