47,133 repositories indexed
1–24 of 50 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Continuous Inspection
static analysis of C/C++ code
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
It's not just a linter that annoys you!
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
A tool for use with clang to analyze #includes in C and C++ source files
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
Security-focused static analysis for the Phoenix Framework
Find unused and duplicate CSS
CodePecker is a tool to detect unused Swift code.
Linting tool for CloudFormation templates
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
Scan Nix files for dead code