Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
pfff github.com
Facebook's tools for code analysis, visualizations, or style-preserving source transformation for many languages.
-
Code Quality Checker Tools For PHP Projects github.com
A collection of PHP linters in github collections
-
Clean code linters github.com
A collection of linters in github collections
-
:information_source: github.com
warning: — Detect errors and potential problems in JavaScript code and enforce your team's coding conventions.
-
tclchecker github.com
A static syntax analysis module (as part of TDK).
-
HasMySecretLeaked gitguardian.com
copyright: — HasMySecretLeaked is a project from GitGuardian that aims to help individual users and organizations search across 20 million exposed secrets to verify if their developer secrets have leaked on public repositories, gists, and issues on GitHub projects.
-
GitGuardian ggshield gitguardian.com
ggshield is a CLI application that runs in your local environment or in a CI environment to help you detect more than 350+ types of secrets, as well as other potential security vulnerabilities or policy breaks affecting your codebase.
-
rector getrector.org
Instant Upgrades and Automated Refactoring of any PHP 5.3+ code. It upgrades your code for PHP 7.4, 8.0 and beyond. Rector promises a low false-positive rate because it looks for narrowly defined AST (abstract syntax tree) patterns. The main use-case are tackling technical debt…
-
CodeFlow getcodeflow.com
copyright: — Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)
-
Clayton getclayton.com
copyright: — AI-powered code reviews for Salesforce. Secure your developments, enforce best practice and control your technical debt in real-time.
-
GCC gcc.gnu.org
The GCC compiler has static analysis capabilities since version 10. This option is only available if GCC was configured with analyzer support enabled. It can also output its diagnostics to a JSON file in the SARIF format (from v13).
-
fta ftaproject.dev
Rust-based static analysis for TypeScript projects
-
fantomas fsprojects.github.io
F# source code formatter.
-
portlint freebsd.org
A verifier for FreeBSD and DragonFlyBSD port directories.
-
Fortitude fortitude.readthedocs.io
Fortran linter, inspired by (and built on) Ruff, and based on community best practices. Supports latest Fortran (2023) standard.
-
Fixinator fixinator.app
copyright: — Static security code analysis for ColdFusion or CFML code. Designed to work within a CI pipeline or from the developers terminal.
-
Find Security Bugs find-sec-bugs.github.io
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-
redex fbredex.com
Redex provides a framework for reading, writing, and analyzing .dex files, and a set of optimization passes that use this framework to improve the bytecode. An APK optimized by Redex should be smaller and faster.
-
Infer fbinfer.com
A static analyzer for Java, C and Objective-C
-
fb-contrib fb-contrib.sourceforge.net
A plugin for FindBugs with additional bug detectors.
-
Fallow fallow.tools
Rust-native static analysis for JavaScript and TypeScript. Maps a repository as one dependency graph to find unused code and structural problems across file boundaries. Runs from the CLI or GitHub Actions, with VS Code, LSP, MCP, and Node API integrations.
-
ESBMC esbmc.org
ESBMC is an open source, permissively licensed, context-bounded model checker based on satisfiability modulo theories for the verification of single- and multi-threaded C/C++ programs.
-
Error Prone errorprone.info
Catch common Java mistakes as compile-time errors.
-
dialyzer erlang.org
The DIALYZER, a DIscrepancy AnaLYZer for ERlang programs. Dialyzer is a static analysis tool that identifies software discrepancies, such as definite type errors, code that has become dead or unreachable because of programming error, and unnecessary tests, in single Erlang…
-
Enforster AI enforster.ai
copyright: — Enforster AI performs Contextual Code Security SAST, leveraging LLMs and artificial intelligence to reduce and enrich the detection of Logic Flaws, Secrets, Data leaks, Supply chain and technical vulnerabilities.
-
Embold embold.io
copyright: — Intelligent software analytics platform that identifies design issues, code issues, duplication and metrics. Supports Java, C, C++, C#, JavaScript, TypeScript, Python, Go, Kotlin and more.
-
cargo-deny embarkstudios.github.io
A cargo plugin for linting your dependencies. It can be used either as a command line too, a Rust crate, or a Github action for CI. It checks for valid license information, duplicate crates, security vulnerabilities, and more.
-
PHPQA edgedesigncz.github.io
A tool for running QA tools (phploc, phpcpd, phpcs, pdepend, phpmd, phpmetrics).
-
flawfinder dwheeler.com
Finds possible security weaknesses.
-
dotenv-linter dotenv-linter.readthedocs.io
Linting dotenv files like a charm.
-
dotenv-linter (Rust) dotenv-linter.github.io
Lightning-fast linter for .env files. Written in Rust
-
RuboCop docs.rubocop.org
A Ruby static code analyzer, based on the community Ruby style guide.
-
goodpractice docs.ropensci.org
Analyses the source code for R packages and provides best-practice recommendations.
-
OpenRewrite docs.openrewrite.org
OpenRewrite fixes common static analysis issues reported through Sonar and other tools using a Maven and Gradle plugin or the Moderne CLI.
-
Freeplane Code Explorer docs.freeplane.org
The Code Explorer mode in Freeplane is designed for analyzing the structure and dependencies of code compiled to JVM class files. It also allows displaying ArchUnit test results directly in Freeplane, if Freeplane is running and ArchUnit detects rule violations during the tests.
-
cookstyle docs.chef.io
Cookstyle is a linting tool based on the RuboCop Ruby linting tool for Chef cookbooks.
-
ty docs.astral.sh
An extremely fast Python type checker written in Rust.
-
abapOpenChecks docs.abapopenchecks.org
Enhances the SAP Code Inspector with new and customizable checks.
-
Diffblue diffblue.com
copyright: — Diffblue is a software company that provides AI-powered code analysis and testing solutions for software development teams. Its technology helps developers automate testing, find bugs, and reduce manual labor in their software development processes. The company's…
-
diff.rs diff.rs
Web application (WASM) to render a diff between Rust crate versions.
-
Similarity Tester dickgrune.com
A tool that finds similarities between or within files to support you encountering DRY principle violations.
-
CodeRush devexpress.com
copyright: — Code creation, debugging, navigation, refactoring, analysis and visualization tools that use the Roslyn engine in Visual Studio 2015 and up.
-
Closure Compiler developers.google.com
A compiler tool to increase efficiency, reduce size, and provide code warnings in JavaScript files.
-
Android Lint developer.android.com
Run static analysis on Android projects.
-
Android Studio developer.android.com
Based on IntelliJ IDEA, and comes bundled with tools for Android including Android Lint.
-
detekt detekt.github.io
Static code analysis for Kotlin code.
-
DesigniteJava designite-tools.com
copyright: — DesigniteJava supports detection of various architecture, design, and implementation smells along with computation of various code quality metrics.
-
DerScanner derscanner.com
copyright: — Multi-language Static Application Security Testing (SAST) platform that detects critical vulnerabilities, including hardcoded secrets, weak cryptography, backdoors, SQL injections, insecure configurations, etc.
-
axe-core deque.com
Accessibility engine for automated Web UI testing. Tests HTML against WCAG 2.0, 2.1, and 2.2 guidelines. Used by Google Lighthouse, Microsoft Accessibility Insights, and thousands of organizations worldwide.
-
DepWarden depwarden.in
copyright: — Free, anonymous SCA + SAST scanner. SCA: scans npm, PyPI, Maven, Go, Cargo, Ruby, NuGet dependencies for CVEs (OSV/KEV/EPSS), typosquats and supply-chain risk. SAST: pattern + taint analysis for 15 languages, 300+ rules. No account, no source upload. Available as a…
- next page of items loading…
