Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
JSLint github.com
information_source: — The JavaScript Code Quality Tool.
-
Rubycritic github.com
A Ruby code quality reporter.
-
Roslynator github.com
A collection of 190+ analyzers and 190+ refactorings for C#, powered by Roslyn.
-
ataraxy-labs/sem github.com
Entity-level semantic version control CLI. Diff, blame, graph, and impact analysis at the function/class level across 32 languages via tree-sitter.
-
ale github.com
Asynchronous Lint Engine for Vim and NeoVim with support for many languages.
-
dtolnay/cargo-expand github.com
Expand macros in your source code
-
Haskell Dockerfile Linter github.com
A smarter Dockerfile linter that helps you build best practice Docker images.
-
RustViz github.com
generates visualizations from simple Rust programs to assist users in better understanding the Rust Lifetime and Borrowing mechanism.
-
Bearer github.com
Open-Source static code analysis tool to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). Highly configurable and easily extensible, built for security and engineering teams.
-
Pronto github.com
Quick automated code review of your changes. Supports more than 40 runners for various languages, including Clang, Elixir, JavaScript, PHP, Ruby and more.
-
cfn-python-lint :fire::fire::fire::fire::fire: github.com
AWS Labs CloudFormation linter.
-
errcheck github.com
Errcheck is a program for checking for unchecked errors in Go programs.
-
codeql github.com
Deep code analysis - semantic queries and dataflow for several languages with VSCode plugin support.
-
Reviewdog github.com
A tool for posting review comments from any linter in any code hosting service.
-
cargo-udeps github.com
[cargo-udeps] - find unused dependencies
-
go-critic github.com
source code linter that brings checks that are currently not implemented in other linters.
-
clj-kondo github.com
A linter for Clojure code that sparks joy. It informs you about potential errors while you are typing.
-
cpplint github.com
A C++ style checker following Google's C++ style guide.
-
dialyxir github.com
Mix tasks to simplify use of Dialyzer in Elixir projects.(Docs).
-
geiger github.com
A program that list statistics related to usage of unsafe code in a crate and all its dependencies
-
go-tools github.com
A collection of tools and libraries for working with Go code, including linters and static analysis
-
larastan github.com
Adds static analysis to Laravel improving developer productivity and code quality. It is a wrapper around PHPStan.
-
slither github.com
Static analysis framework that runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses.
-
markdownlint github.com
Node.js -based style checker and lint tool for Markdown/CommonMark files.
-
Steep github.com
Gradual Typing for Ruby.
-
google-java-format github.com
Reformats Java source code to comply with Google Java Style
-
pip-audit github.com
Tool for scanning Python packages for known vulnerabilities. Developed by the Python Packaging Authority (PyPA) and supported by Trail of Bits and Google. Scans Python environments and requirements files to identify vulnerable packages and suggests remediation. Supports GitHub…
-
scorecard github.com
Security Scorecards - Security health metrics for Open Source
-
ataraxy-labs/weave github.com
Entity-level merge driver for Git. Resolves merge conflicts by understanding code structure via tree-sitter. Drops into git as a custom merge driver via .gitattributes.
-
bloaty github.com
Ever wondered what's making your binary big? Bloaty McBloatface will show you a size profile of the binary so you can understand what's taking up space inside. Bloaty performs a deep analysis of the binary. Using custom ELF, DWARF, and Mach-O parsers, Bloaty aims to accurately…
-
lintr github.com
Static Code Analysis for R.
-
Database Consistency github.com
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
-
shellharden github.com
A syntax highlighter and a tool to semi-automate the rewriting of scripts to ShellCheck conformance, mainly focused on quoting.
-
ApplicationInspector github.com
Creates reports of over 400 rule patterns for feature detection (e.g. the use of cryptography or version control in apps).
-
GrumPHP github.com
Checks code on every commit.
-
NullAway github.com
Type-based null-pointer checker with low build-time overhead; an Error Prone plugin.
-
gofumpt github.com
Enforce a stricter format than gofmt, while being backwards-compatible. That is, gofumpt is happy with a subset of the formats that gofmt is happy with. The tool is a fork of gofmt as of Go 1.19, and requires Go 1.18 or later. It can be used as a drop-in replacement to format…
-
lockfile-lint github.com
Lint lockfiles for improved security and trust policies to mitigate malicious package injection and insecure lockfile resources.
-
kani github.com
The Kani Rust Verifier is a bit-precise model checker for Rust. Kani is particularly useful for verifying unsafe code blocks in Rust, where the "unsafe superpowers" are unchecked by the compiler. Kani verifies:
-
kube-linter github.com
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
-
deadnix github.com
Scan Nix files for dead code.
-
Dockle github.com
Container Image Linter for Security helping build the Best-Practice Docker Image. Scans Docker images for security vulnerabilities and CIS Benchmark compliance. Checks for secrets, credential exposure, and security best practices. Provides multiple severity levels (FATAL, WARN…
-
kubeconform github.com
A fast Kubernetes manifests validator with support for custom resources.
-
deptrac github.com
Enforce rules for dependencies between software layers.
-
ClassGraph github.com
A classpath and module path scanner for querying or visualizing class metadata or class relatedness.
-
Standard Ruby github.com
Ruby Style Guide, with linter & automatic code fixer
-
php-static-analysis-tools github.com
A reviewed list of useful PHP static analysis tools
-
Composer-Dependency-Analyzer github.com
The plugin helps to find dependency issues, including dead, unused, shadow and misplaced dependencies.
-
lizard github.com
Lizard is an extensible Cyclomatic Complexity Analyzer for many programming languages including C/C++ (doesn't require all the header files or Java imports). It also does copy-paste detection (code clone detection/code duplicate detection) and many other forms of static code…
-
refurb github.com
A tool for refurbishing and modernizing Python codebases. Refurb is heavily inspired by clippy, the built-in linter for Rust.
- next page of items loading…
