Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
Violations Lib github.com
Java library for parsing report files from static code analysis. Used by a bunch of Jenkins, Maven and Gradle plugins.
-
StaticLint github.com
Static Code Analysis for Julia
-
Super-Linter github.com
Combination of multiple linters to install as a GitHub Action.
-
pgspot github.com
Spot vulnerabilities in postgres extension scripts. Finds unsafe search_path usage and unsafe object creation in PostgreSQL extension scripts or any other PostgreSQL SQL code.
-
DelphiLint github.com
A Delphi IDE package providing on-the-fly code analysis and linting, powered by SonarDelphi.
-
Reflection github.com
Reflection library to do Static Analysis for PHP Projects
-
mdsf github.com
Format markdown code blocks using your favorite code formatters.
-
flowR github.com
A program slicer and dataflow analyzer for the R programming language. Its slicer allows you to reduce a complicated program just to the parts related for a specific task (e.g., the generation of a single or collection of plots, a significance test, ...). The dataflow analysis…
-
wasm-language-tools github.com
WebAssembly Language Tools aims to provide and improve the editing experience of WebAssembly Text Format. It also provides an out-of-the-box formatter (a.k.a. pretty printer) for WebAssembly Text Format.
-
CodeDepends github.com
Static Code Analysis for R.
-
oelint-adv github.com
Linter for bitbake recipes used in open-embedded and YOCTO
-
goast github.com
Go AST (Abstract Syntax Tree) based static analysis tool with Rego.
-
relint github.com
A static file linter that allows you to write custom rules using regular expressions (RegEx).
-
zarn github.com
A lightweight static security analysis tool for modern Perl Apps
-
OpenStaticAnalyzer github.com
OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.
-
textlint textlint.github.io
textlint is an open source text linting utility written in JavaScript.
-
languagetool languagetool.org
Style and grammar checker for 25+ languages. It finds many errors that a simple spell checker cannot detect.
-
Upsource jetbrains.com
copyright: — Code review tool with static code analysis and code-aware navigation for Java, PHP, JavaScript and Kotlin.
-
stylelint stylelint.io
A mighty, modern CSS linter that helps you enforce consistent conventions and avoid errors in your stylesheets. Supports CSS-like syntaxes, including SCSS.
-
Crystal newsletter crystal-lang.org
The Crystal compiler has built-in linting functionality.
-
List of tools for static code analysis en.wikipedia.org
A list of tools for static code analysis from Wikipedia.
-
HoundCI houndci.com
Comments on style violations in GitHub pull requests. Supports Coffeescript, Go, HAML, JavaScript, Ruby, SCSS and Swift.
-
CodeClimate codeclimate.com
The open and extensible static analysis platform, for everyone.
-
Xcode developer.apple.com
Essential IDE for iOS/macOS development.
-
dennis github.com
A set of utilities for working with PO files to ease development and improve quality.
-
flen github.com
Get info on length of functions in a Go package.
-
promformat github.com
Promformat is a PromQL formatter written in Python.
-
JLiSA github.com
An abstract interpretation-based static analyzer for Java build upon the LiSA framekwork.
-
metadata-json-lint github.com
Tool to check the validity of Puppet metadata.json files.
-
Pyra github.com
Pyra is a high-level linter static analyzer for data science applications written in Python, that helps developers identify potential issues in their data science code written in Python, as an extension of Lyra.
-
BlockWatch github.com
A language-agnostic linter that keeps code, documentation, and configuration in sync and enforces strict formatting and validation rules.
-
Neurolint-CLI github.com
Deterministic code transformation tool using AST parsing and rule-based transformations. Automatically fixes 50+ issues including accessibility violations, hydration errors, React 19/Next.js 16 migrations, and configuration updates. Features 5-step fail-safe orchestration to…
-
Verilator veripool.org
A tool which converts Verilog to a cycle-accurate behavioral model in C++ or SystemC. Performs lint code-quality checks.
-
terraform-compliance terraform-compliance.com
A lightweight, compliance- and security focused, BDD test framework against Terraform.
-
Steampunk Spotter steampunk.si
copyright: — Ansible Playbook Scanning Tool that analyzes and offers recommendations for your playbooks.
-
squirrelscan squirrelscan.com
squirrelscan is a website QA tool built for coding agents such as Claude Code and Cursor. Its squirrel CLI crawls a live site and runs 260+ audit rules across SEO, performance, security, accessibility, structured data and agent experience, then returns exact source-mapped…
-
SonarQube for IDE sonarlint.org
SonarQube for IDE (formerly SonarLint) is a free IDE extension available for IntelliJ, VS Code, Visual Studio, and Eclipse, to find and fix coding issues in real-time, flagging issues as you code, just like a spell-checker. More than a linter, it also delivers rich contextual…
-
Semgrep semgrep.dev
A fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Its rules look like the code you already write; no abstract syntax trees or regex wrestling. Supports 17+ languages.
-
RIPS ripstech.com
copyright: — A static source code analyser for vulnerabilities in PHP scripts.
-
remark-lint remark.js.org
Pluggable Markdown code style linter written in JavaScript.
-
Prettier prettier.io
An opinionated code formatter.
-
pre-commit pre-commit.com
A framework for managing and maintaining multi-language pre-commit hooks.
-
PostCSS postcss.org
A tool for transforming styles with JS plugins. These plugins can lint your CSS, support variables and mixins, transpile future CSS syntax, inline images, and more.
-
JEB Decompiler pnfsoftware.com
copyright: — Decompile and debug binary code. Break down and analyze document files. Android Dalvik, MIPS, ARM, Intel x86, Java, WebAssembly & Ethereum Decompilers.
-
Pixee pixee.ai
copyright: — Pixeebot finds security and code quality issues in your code and creates merge-ready pull requests with recommended fixes.
-
Oversecured oversecured.com
copyright: — Enterprise vulnerability scanner for Android and iOS apps. It allows app owners and developers to secure each new version of a mobile app by integrating Oversecured into the development process.
-
OSV-Scanner osv.dev
Vulnerability scanner written in Go which uses the data provided by OSV.dev. Developed by Google to scan dependencies across multiple languages and package managers for known vulnerabilities. Supports container scanning, license scanning, and guided remediation. Works with…
-
holistic holistic.dev
More than 1,300 rules to analyze SQL queries. Takes an SQL schema definition and the query source code to generate improvement recommendations. Detects code smells, unused indexes, unused tables, views, materialized views, and more.
-
CodeRabbit coderabbit.ai
copyright: — AI-powered code review tool that helps developers write better code faster. CodeRabbit provides automated code reviews, identifies security vulnerabilities, and suggests code improvements. It integrates with GitHub and GitLab.
-
CodeFactor codefactor.io
copyright: — Automated Code Analysis for repos on GitHub or BitBucket.
- next page of items loading…
