Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
packj github.com
Packj (pronounced package) is a command line (CLI) tool to vet open-source software packages for "risky" attributes that make them vulnerable to supply chain attacks. This is the tool behind our large-scale security analysis platform Packj.dev that continuously vets packages…
-
R Language Server github.com
Provides code completion, refactoring, folding, diagnostics (with lintr), and more for R.
-
SonarDelphi github.com
. [Delphi] Static analyzer for the SonarQube code quality platform.
-
prealloc github.com
Finds slice declarations that could potentially be preallocated.
-
clusterlint github.com
Clusterlint queries live Kubernetes clusters for resources, executes common and platform specific checks against these resources and provides actionable feedback to cluster operators. It is a non invasive tool that is run externally. Clusterlint does not alter the resource…
-
lockbud github.com
Statically detects Rust deadlocks bugs. It currently detects two common kinds of deadlock bugs: doublelock and locks in conflicting order. It will print bugs in JSON format together with the source code location and an explanation of each bug.
-
phpmnd github.com
Helps to detect magic numbers.
-
svls github.com
A Language Server Protocol implementation for Verilog and SystemVerilog, including lint capabilities.
-
unparam github.com
Find unused function parameters.
-
scapegoat github.com
Scala compiler plugin for static code analysis.
-
RefactorFirst github.com
Identifies and prioritizes God Classes and Highly Coupled classes in Java codebases you should refactor first.
-
Skunk github.com
A SkunkScore Calculator for Ruby Code -- Find the most complicated code without test coverage!
-
dephpend github.com
Dependency analysis tool.
-
VeriFast github.com
A tool for modular formal verification of correctness properties of single-threaded and multithreaded C and Java programs annotated with preconditions and postconditions written in separation logic. To express rich specifications, the programmer can define inductive datatypes…
-
sqlvet github.com
Performs static analysis on raw SQL queries in your Go code base to surface potential runtime errors. It checks for SQL syntax error, identifies unsafe queries that could potentially lead to SQL injections makes sure column count matches value count in INSERT statements and…
-
luacheck github.com
A tool for linting and static analysis of Lua code.
-
ck github.com
Calculates Chidamber and Kemerer object-oriented metrics by processing the source Java files.
-
sqlint github.com
Simple SQL linter.
-
PHP Semantic Versioning Checker github.com
Suggests a next version according to semantic versioning.
-
Regal github.com
Regal is a linter for the policy language Rego. Regal aims to catch bugs and mistakes in policy code, while at the same time helping people learn the language, best practices and idiomatic constructs.
-
bashate github.com
Code style enforcement for bash programs. The output format aims to follow pycodestyle (pep8) default output format.
-
vscode-verilog-hdl-support github.com
Verilog HDL/SystemVerilog/Bluespec SystemVerilog support for VS Code. Provides syntax highlighting and Linting support from Icarus Verilog, Vivado Logical Simulation, Modelsim and Verilator
-
forbidden-apis github.com
Detects and forbids invocations of specific method/class/field (like reading from a text stream without a charset). Maven/Gradle/Ant compatible.
-
cargo-spellcheck github.com
Checks all your documentation for spelling and grammar mistakes with hunspell (ready) and languagetool (preview)
-
wsl github.com
Enforces empty lines at the right places.
-
parallel-lint github.com
This tool checks syntax of PHP files faster than serial check with a fancier output.
-
linters github.com
An introduction to static code analysis
-
haml-lint github.com
Tool for writing clean and consistent HAML.
-
bodyclose github.com
Checks whether HTTP response body is closed.
-
goconst github.com
Finds repeated strings that could be replaced by a constant.
-
Goldziher/scythe github.com
Polyglot SQL compiler and linter that generates type-safe code from SQL with schema-aware linting.
-
TypeScript Call Graph github.com
CLI to generate an interactive graph of functions and calls from your TypeScript files
-
lint github.com
An opinionated, community-driven set of lint rules for Dart and Flutter projects. Like pedantic but stricter
-
ember-template-lint github.com
Linter for Ember or Handlebars templates.
-
Depends github.com
Analyses the comprehensive dependencies of code elements for Java, C/C++, Ruby.
-
pyroma github.com
Rate how well a Python project complies with the best practices of the Python packaging ecosystem, and list issues that could be improved.
-
slim-lint github.com
Configurable tool for analyzing Slim templates.
-
Weeder github.com
A tool for detecting dead exports or package imports in Haskell code.
-
dbcritic github.com
dbcritic finds problems in a database schema, such as a missing primary key constraint in a table.
-
Dlint github.com
A tool for ensuring Python code is secure.
-
nestjs-doctor github.com
Static analysis tool for NestJS applications. Detects anti-patterns across security, performance, correctness, and architecture with 30+ built-in rules. Outputs a 0-100 health score. Includes module graph visualization, endpoint dependency graphs, and database schema analysis…
-
rpmlint github.com
Tool for checking common errors in rpm packages.
-
Violations Lib github.com
Java library for parsing report files from static code analysis. Used by a bunch of Jenkins, Maven and Gradle plugins.
-
StaticLint github.com
Static Code Analysis for Julia
-
Super-Linter github.com
Combination of multiple linters to install as a GitHub Action.
-
pgspot github.com
Spot vulnerabilities in postgres extension scripts. Finds unsafe search_path usage and unsafe object creation in PostgreSQL extension scripts or any other PostgreSQL SQL code.
-
DelphiLint github.com
A Delphi IDE package providing on-the-fly code analysis and linting, powered by SonarDelphi.
-
Reflection github.com
Reflection library to do Static Analysis for PHP Projects
-
mdsf github.com
Format markdown code blocks using your favorite code formatters.
-
flowR github.com
A program slicer and dataflow analyzer for the R programming language. Its slicer allows you to reduce a complicated program just to the parts related for a specific task (e.g., the generation of a single or collection of plots, a significance test, ...). The dataflow analysis…
- next page of items loading…
