CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
- semmle-ql
- codeql
- github-advanced-security
- github-security-lab
Repository Index
58,136 visible repositories in the index
1–16 of 16 · Most stars
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
- dependency-cruiser
- typescript
- javascript
- static-analysis
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
- ai-code-review
- cli
- code-review
- developer-tools
A tool for quantitative risk analysis of Android applications based on machine learning techniques
- android
- risk
- android-permissions
- quantitative-risk-analysis
A dotnet CLI to generate type-safe GraphQL clients for F# and Fable with automatic deserialization, static query verification and type checking
- graphql-schema
- dotnet-cli
- fable
- graphql
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
- code-review
- developer-tools
- git-diff
- github-actions
Guess Erlang Application Scattering
- erlang
- beam-files
The MongoDB Analyzer is a free tool that helps you understand how your code translates into the MongoDB Query API.
- c-sharp
- csharp
- dotnet
- linq
The MemCAD static analyzer
- abstract-interpretation
- static-analysis
- c
- shape-analysis
Static analysis CLI tool for Magento 2 codebases - detects anti-patterns, code quality issues, and architectural problems. SARIF output for CI/CD integration.
- code-analyzer
- code-quality
- magento
- magento2
PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.