47,133 repositories indexed
1–23 of 23 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Your agent writes bad React. This catches it
PHP Static Analysis Tool - discover bugs in your code without running it!
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
It's not just a linter that annoys you!
🔰 Instant PHP quality checks from your console
A tool for use with clang to analyze #includes in C and C++ source files
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Keep your architecture clean.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
A Rake task gem that helps you find the unused routes and controller actions for your Rails 3+ app
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
Analyzes Elm projects, to help find mistakes before your users find them.
👮Sanitize your Assets.xcassets files
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
Search for unused components in your Ember project
Find missing or unused translations in your Ember.js projects
Spends CPU cycles so you don't spend tokens. The LLM gets a briefing packet instead of a flashlight in a dark room.
The MongoDB Analyzer is a free tool that helps you understand how your code translates into the MongoDB Query API.