Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
krane github.com
Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.
-
clazy github.com
Qt-oriented static code analyzer based on the Clang framework. clazy is a compiler plugin which allows clang to understand Qt semantics. You get more than 50 Qt related compiler warnings, ranging from unneeded memory allocations to misusage of API, including fix-its for…
-
protolint github.com
Pluggable linter and fixer to enforce Protocol Buffer style and conventions.
-
packj github.com
Packj (pronounced package) is a command line (CLI) tool to vet open-source software packages for "risky" attributes that make them vulnerable to supply chain attacks. This is the tool behind our large-scale security analysis platform Packj.dev that continuously vets packages…
-
R Language Server github.com
Provides code completion, refactoring, folding, diagnostics (with lintr), and more for R.
-
SonarDelphi github.com
. [Delphi] Static analyzer for the SonarQube code quality platform.
-
prealloc github.com
Finds slice declarations that could potentially be preallocated.
-
clusterlint github.com
Clusterlint queries live Kubernetes clusters for resources, executes common and platform specific checks against these resources and provides actionable feedback to cluster operators. It is a non invasive tool that is run externally. Clusterlint does not alter the resource…
-
lockbud github.com
Statically detects Rust deadlocks bugs. It currently detects two common kinds of deadlock bugs: doublelock and locks in conflicting order. It will print bugs in JSON format together with the source code location and an explanation of each bug.
-
phpmnd github.com
Helps to detect magic numbers.
-
svls github.com
A Language Server Protocol implementation for Verilog and SystemVerilog, including lint capabilities.
-
unparam github.com
Find unused function parameters.
-
scapegoat github.com
Scala compiler plugin for static code analysis.
-
RefactorFirst github.com
Identifies and prioritizes God Classes and Highly Coupled classes in Java codebases you should refactor first.
-
Skunk github.com
A SkunkScore Calculator for Ruby Code -- Find the most complicated code without test coverage!
-
dephpend github.com
Dependency analysis tool.
-
VeriFast github.com
A tool for modular formal verification of correctness properties of single-threaded and multithreaded C and Java programs annotated with preconditions and postconditions written in separation logic. To express rich specifications, the programmer can define inductive datatypes…
-
sqlvet github.com
Performs static analysis on raw SQL queries in your Go code base to surface potential runtime errors. It checks for SQL syntax error, identifies unsafe queries that could potentially lead to SQL injections makes sure column count matches value count in INSERT statements and…
-
luacheck github.com
A tool for linting and static analysis of Lua code.
-
ck github.com
Calculates Chidamber and Kemerer object-oriented metrics by processing the source Java files.
-
sqlint github.com
Simple SQL linter.
-
PHP Semantic Versioning Checker github.com
Suggests a next version according to semantic versioning.
-
Regal github.com
Regal is a linter for the policy language Rego. Regal aims to catch bugs and mistakes in policy code, while at the same time helping people learn the language, best practices and idiomatic constructs.
-
bashate github.com
Code style enforcement for bash programs. The output format aims to follow pycodestyle (pep8) default output format.
-
vscode-verilog-hdl-support github.com
Verilog HDL/SystemVerilog/Bluespec SystemVerilog support for VS Code. Provides syntax highlighting and Linting support from Icarus Verilog, Vivado Logical Simulation, Modelsim and Verilator
-
forbidden-apis github.com
Detects and forbids invocations of specific method/class/field (like reading from a text stream without a charset). Maven/Gradle/Ant compatible.
-
cargo-spellcheck github.com
Checks all your documentation for spelling and grammar mistakes with hunspell (ready) and languagetool (preview)
-
wsl github.com
Enforces empty lines at the right places.
-
parallel-lint github.com
This tool checks syntax of PHP files faster than serial check with a fancier output.
-
linters github.com
An introduction to static code analysis
-
haml-lint github.com
Tool for writing clean and consistent HAML.
-
bodyclose github.com
Checks whether HTTP response body is closed.
-
SonarQube Server sonarqube.org
SonarQube empowers development teams with a code quality and security solution that deeply integrates into your enterprise environment; enabling you to deploy clean code consistently and reliably. SonarQube provides a free and open source Community Build.
-
LGTM lgtm.com
copyright: — Find security vulnerabilities, variants, and critical code quality issues using CodeQL queries over source code. Automatic PR code review; free for open source. Formerly semmle. It supports public Git repositories hosted on Bitbucket Cloud, GitHub.com, GitLab.com.
-
Hopper hopperapp.com
copyright: — macOS and Linux reverse engineering tool that lets you disassemble, decompile and debug applications. Hopper displays the code using different representations, e.g. the Control Flow Graph, and the pseudo-code of a procedure. Supports Apple Silicon.
-
Ghidra ghidra-sre.org
A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission
-
Codacy codacy.com
copyright: — Code Analysis to ship Better Code, Faster.
-
goconst github.com
Finds repeated strings that could be replaced by a constant.
-
Goldziher/scythe github.com
Polyglot SQL compiler and linter that generates type-safe code from SQL with schema-aware linting.
-
TypeScript Call Graph github.com
CLI to generate an interactive graph of functions and calls from your TypeScript files
-
lint github.com
An opinionated, community-driven set of lint rules for Dart and Flutter projects. Like pedantic but stricter
-
ember-template-lint github.com
Linter for Ember or Handlebars templates.
-
Depends github.com
Analyses the comprehensive dependencies of code elements for Java, C/C++, Ruby.
-
pyroma github.com
Rate how well a Python project complies with the best practices of the Python packaging ecosystem, and list issues that could be improved.
-
slim-lint github.com
Configurable tool for analyzing Slim templates.
-
Weeder github.com
A tool for detecting dead exports or package imports in Haskell code.
-
dbcritic github.com
dbcritic finds problems in a database schema, such as a missing primary key constraint in a table.
-
Dlint github.com
A tool for ensuring Python code is secure.
-
nestjs-doctor github.com
Static analysis tool for NestJS applications. Detects anti-patterns across security, performance, correctness, and architecture with 30+ built-in rules. Outputs a 0-100 health score. Includes module graph visualization, endpoint dependency graphs, and database schema analysis…
-
rpmlint github.com
Tool for checking common errors in rpm packages.
- next page of items loading…
