Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
Nauz File Detector github.com
Static Linker/Compiler/Tool detector for Windows, Linux and MacOS.
-
codespell github.com
Check code for common misspellings.
-
Bootlint github.com
, the HTML linter for Bootstrap projects.
-
ayarotsky/diesel-guard github.com
a linter for Diesel and SQLx that catches dangerous PostgreSQL migrations (table locks, rewrites, blocking ops) and suggests safe alternatives
-
mdl github.com
A tool to check Markdown files and flag style issues.
-
prospector github.com
A wrapper around pylint, pep8, mccabe and others.
-
radon github.com
.
-
dotnet-format github.com
A code formatter for .NET. Preferences will be read from an .editorconfig file, if present, otherwise a default set of preferences will be used. At this time dotnet-format is able to format C# and Visual Basic projects with a subset of supported .editorconfig options.
-
Active Record Doctor github.com
Identify database issues before they hit production.
-
todocheck github.com
Static code analyser which links TODO comments in code with issues in your issue tracker.
-
elvis github.com
Erlang Style Reviewer.
-
unconvert github.com
Remove unnecessary type conversions from Go source.
-
chart-testing github.com
ct is the tool for testing Helm charts. It is meant to be used for linting and testing pull requests. It automatically detects charts changed against the target branch.
-
gocyclo github.com
Calculate cyclomatic complexities of functions in Go source code.
-
HLint github.com
HLint is a tool for suggesting possible improvements to Haskell code.
-
deno_lint github.com
Official linter for Deno.
-
dupl github.com
Tool for code clone detection.
-
Twiggy github.com
Analyzes a binary's call graph to profile code size. The goal is to slim down wasm binary size.
-
FSharpLint github.com
F# code linter.
-
AWS CloudFormation Guard github.com
Check local CloudFormation templates against policy-as-code rules and generate rules from existing templates.
-
churn-php github.com
Helps discover good candidates for refactoring.
-
ArchUnitNET github.com
A C# architecture test library to specify and assert architecture rules in C# for automated testing.
-
Rudra github.com
Rust Memory Safety & Undefined Behavior Detection. It is capable of analyzing single Rust packages as well as all the packages on crates.io.
-
wily github.com
A command-line tool for archiving, exploring and graphing the complexity of Python source code.
-
phpqa - jakzal github.com
Many tools for PHP static analysis in one container.
-
PHP Architecture Tester github.com
Easy to use architecture testing tool for PHP.
-
FlowDroid github.com
Static taint analysis tool for Android applications.
-
checkmake github.com
Linter / Analyzer for Makefiles.
-
Meziantou.Analyzer github.com
A Roslyn analyzer to enforce some good practices in C# in terms of design, usage, security, performance, and style.
-
emerge github.com
Emerge is a source code and dependency visualizer that can be used to gather insights about source code structure, metrics, dependencies and complexity of software projects. After scanning the source code of a project it provides you an interactive web interface to explore and…
-
Dataflow Framework github.com
An industrial-strength dataflow framework for Java. The Dataflow Framework is used in the Checker Framework, Google’s Error Prone, Uber’s NullAway, Meta’s Nullsafe, and in other contexts. It is distributed with the Checker Framework.
-
Rev-dep github.com
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript projects. Trace imports, identify circular dependencies, find unused code, clean node modules.
-
D-Scanner github.com
D-Scanner is a tool for analyzing D source code.
-
cargo-show-asm github.com
cargo subcommand showing the assembly, LLVM-IR and MIR generated for Rust code
-
tsqllint github.com
T-SQL-specific linter.
-
statix github.com
Lints and suggestions for the Nix programming language. "statix check" highlights antipatterns in Nix code. "statix fix" can fix several such occurrences.
-
autoflake github.com
Autoflake removes unused imports and unused variables from Python code.
-
rufo github.com
An opinionated ruby formatter, intended to be used via the command line as a text-editor plugin, to autoformat files on save or on demand.
-
PHPArkitect github.com
PHPArkitect helps you to keep your PHP codebase coherent and solid, by permitting to add some architectural constraint check to your workflow. You can express the constraint that you want to enforce, in simple and readable PHP code.
-
SonarAnalyzer.CSharp github.com
These Roslyn analyzers allow you to produce Clean Code that is safe, reliable, and maintainable by helping you find and correct bugs, vulnerabilities, and code smells in your codebase.
-
JET github.com
Static type inference system to detect bugs and type instabilities.
-
WALA github.com
Static analysis capabilities for Java bytecode and related languages and for JavaScript.
-
rust-audit github.com
Audit Rust binaries for known bugs or security vulnerabilities. This works by embedding data about the dependency tree (Cargo.lock) in JSON format into a dedicated linker section of the compiled executable.
-
BinSkim github.com
A binary static analysis tool that provides security and correctness results for Windows portable executables.
-
Skylos github.com
Dead code detection, security scanning, secrets detection, and code quality analysis for Python, TypeScript, and Go. Framework-aware analysis with 98% recall. Includes CI/CD GitHub Action, VS Code extension, and MCP server for AI agent integration.
-
Putout github.com
Pluggable and configurable code transformer with built-in eslint, babel plugins support for js, jsx typescript, flow, markdown, yaml and json.
-
ERB Lint github.com
Lint your ERB or HTML files
-
krane github.com
Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.
-
clazy github.com
Qt-oriented static code analyzer based on the Clang framework. clazy is a compiler plugin which allows clang to understand Qt semantics. You get more than 50 Qt related compiler warnings, ranging from unneeded memory allocations to misusage of API, including fix-its for…
-
protolint github.com
Pluggable linter and fixer to enforce Protocol Buffer style and conventions.
- next page of items loading…
