47,133 repositories indexed
1–17 of 17 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Bandit is a tool designed to find common security issues in Python code.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Roslynator is a set of code analysis tools for C#, powered by Roslyn.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Code analyzer for C# and VB.NET projects
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
Tooling and libraries to enforce zero heap allocations in Golang