63,269 visible repositories in the index
1–15 of 15 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
Detect copy-pasted and structurally similar code
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
A static code analyser for annotated TODO comments
Detects smells and computes metrics of Java code
Delphi language plugin for SonarQube
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.