Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
rector getrector.org
Instant Upgrades and Automated Refactoring of any PHP 5.3+ code. It upgrades your code for PHP 7.4, 8.0 and beyond. Rector promises a low false-positive rate because it looks for narrowly defined AST (abstract syntax tree) patterns. The main use-case are tackling technical debt…
-
CodeFlow getcodeflow.com
copyright: — Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)
-
GCC gcc.gnu.org
The GCC compiler has static analysis capabilities since version 10. This option is only available if GCC was configured with analyzer support enabled. It can also output its diagnostics to a JSON file in the SARIF format (from v13).
-
fta ftaproject.dev
Rust-based static analysis for TypeScript projects
-
Fixinator fixinator.app
copyright: — Static security code analysis for ColdFusion or CFML code. Designed to work within a CI pipeline or from the developers terminal.
-
Fallow fallow.tools
Rust-native static analysis for JavaScript and TypeScript. Maps a repository as one dependency graph to find unused code and structural problems across file boundaries. Runs from the CLI or GitHub Actions, with VS Code, LSP, MCP, and Node API integrations.
-
ESBMC esbmc.org
ESBMC is an open source, permissively licensed, context-bounded model checker based on satisfiability modulo theories for the verification of single- and multi-threaded C/C++ programs.
-
dialyzer erlang.org
The DIALYZER, a DIscrepancy AnaLYZer for ERlang programs. Dialyzer is a static analysis tool that identifies software discrepancies, such as definite type errors, code that has become dead or unreachable because of programming error, and unnecessary tests, in single Erlang…
-
Embold embold.io
copyright: — Intelligent software analytics platform that identifies design issues, code issues, duplication and metrics. Supports Java, C, C++, C#, JavaScript, TypeScript, Python, Go, Kotlin and more.
-
cargo-deny embarkstudios.github.io
A cargo plugin for linting your dependencies. It can be used either as a command line too, a Rust crate, or a Github action for CI. It checks for valid license information, duplicate crates, security vulnerabilities, and more.
-
dotenv-linter (Rust) dotenv-linter.github.io
Lightning-fast linter for .env files. Written in Rust
-
ty docs.astral.sh
An extremely fast Python type checker written in Rust.
-
Diffblue diffblue.com
copyright: — Diffblue is a software company that provides AI-powered code analysis and testing solutions for software development teams. Its technology helps developers automate testing, find bugs, and reduce manual labor in their software development processes. The company's…
-
diff.rs diff.rs
Web application (WASM) to render a diff between Rust crate versions.
-
CodeRush devexpress.com
copyright: — Code creation, debugging, navigation, refactoring, analysis and visualization tools that use the Roslyn engine in Visual Studio 2015 and up.
-
Closure Compiler developers.google.com
A compiler tool to increase efficiency, reduce size, and provide code warnings in JavaScript files.
-
DesigniteJava designite-tools.com
copyright: — DesigniteJava supports detection of various architecture, design, and implementation smells along with computation of various code quality metrics.
-
Knowledge base acceleration trec.nist.gov
Study algorithms that improve efficiency of human Knowledge Base.
-
TREC Collections trec.nist.gov
TREC is the benchmark dataset used by most IR and Web search algorithms. It has several tracks, each of which consists of dataset to test for a specific task. The tracks along with suggested use-case are:
-
Apache Lucene lucene.apache.org
Open Source Search Engine that can be used to test Information Retrieval Algorithm. Twitter uses this core for its real-time search.
-
Lemur Toolkit lemurproject.org
Open Source Toolkit for research in Language Modeling, filtering and categorization.
-
Indri Search Engine lemurproject.org
Another Open Source Search Engine competitor of Apache Lucene.
-
The Lemur Project lemurproject.org
The Lemur Project develops search engines, browser toolbars, text analysis tools, and data resources that support research and development of information retrieval and text mining software.
-
DerScanner derscanner.com
copyright: — Multi-language Static Application Security Testing (SAST) platform that detects critical vulnerabilities, including hardcoded secrets, weak cryptography, backdoors, SQL injections, insecure configurations, etc.
-
DepWarden depwarden.in
copyright: — Free, anonymous SCA + SAST scanner. SCA: scans npm, PyPI, Maven, Go, Cargo, Ruby, NuGet dependencies for CVEs (OSV/KEV/EPSS), typosquats and supply-chain risk. SAST: pattern + taint analysis for 15 languages, 300+ rules. No account, no source upload. Available as a…
-
DeepSource deepsource.com
copyright: — In-depth static analysis to find issues in verticals of bug risks, security, anti-patterns, performance, documentation and style. Native integrations with GitHub, GitLab and Bitbucket. Less than 5% false positives.
-
DeepScan deepscan.io
copyright: — An analyzer for JavaScript which targets runtime errors and quality issues rather than coding conventions.
-
deal deal.readthedocs.io
Design by contract for Python. Write bug-free code. By adding a few decorators to your code, you get for free tests, static analysis, formal verification, and much more.
-
PHP Coding Standards Fixer cs.symfony.com
Fixes your code according to standards like PSR-1, PSR-2, and the Symfony standard.
-
rhabdomancer crates.io
IDA Pro headless plugin that locates calls to potentially insecure API functions in a binary file.
-
cargo-semver-checks crates.io
Scan your Rust crate releases for semver violations. It can be used either directly via the CLI, as a GitHub Action in CI, or via release managers like release-plz. It found semver violations in more than 1 in 6 of the top 1000 most-downloaded crates on crates.io.
-
CPAchecker cpachecker.sosy-lab.org
A tool for configurable software verification of C programs. The name CPAchecker was chosen to reflect that the tool is based on the CPA concepts and is used for checking software programs.
-
Corgea corgea.com
copyright: — Corgea is an AI-powered SAST scanner that helps developers find and fix insecure code. It finds business logic flaws, broken authentication, API vulnerabilities, and more with little false positives. Additionally, it automatically writes security fixes for them to…
-
Codiga codiga.io
copyright: — Automated Code Reviews and Technical Debt management platform that supports 12+ languages.
-
CodeSonar from GrammaTech codesecure.com
copyright: — Advanced, whole program, deep path, static analysis of C, C++, Java and C# with easy-to-understand explanations and code and path visualization.
-
CodeScene codescene.com
copyright: — CodeScene is a quality visualization tool for software. Prioritize technical debt, detect delivery risks, and measure organizational aspects. Fully automated.
-
CodeScan codescan.io
copyright: — Code Quality and Security for Salesforce Developers. Made exclusively for the Salesforce platform, CodeScan’s code analysis solutions provide you with total visibility into your code health.
-
CodeQue codeque.co
Ecosystem for structural matching JavaScript and TypeScript code. Offers search tool that understands code structure. Available as CLI tool and Visual Studio Code extension. It helps to search code faster and more accurately making you workflow more effective. Soon it will…
-
CodeNarc codenarc.github.io
A static analysis tool for Groovy source code, enabling monitoring and enforcement of many coding standards and best practices.
-
codechecker codechecker.readthedocs.io
A defect database and viewer extension for the Clang Static Analyzer with web GUI.
-
Codeac codeac.io
copyright: — Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)
-
Code Intelligence code-intelligence.com
copyright: — CI/CD-agnostic DevSecOps platform which combines industry-leading fuzzing engines for finding bugs and visualizing code coverage
-
Code-Graph-RAG code-graph-rag.com
Builds knowledge graphs from multi-language codebases using Tree-sitter AST parsing and stores them in Memgraph. Supports 11 programming languages with a unified graph schema and enables natural language querying and editing of code structure and relationships. Functions as an…
-
scan-build clang-analyzer.llvm.org
Frontend to drive the Clang Static Analyzer built into Clang via a regular build.
-
C2Rust c2rust.com
C2Rust helps you migrate C99-compliant code to Rust. The translator (or transpiler) produces unsafe Rust code that closely mirrors the input C code.
-
buf buf.build
Provides a CLI linter that enforces good API design choices and structure
-
dylint blog.trailofbits.com
A tool for running Rust lints from dynamic libraries. Dylint makes it easy for developers to maintain their own personal lint collections.
-
Black black.readthedocs.io
The uncompromising Python code formatter.
-
bandit bandit.readthedocs.io
A tool to find common security issues in Python code.
-
ruff astral.sh
Fast Python linter, written in Rust. 10-100x faster than existing linters. Compatible with Python 3.10. Supports file watcher.
- next page of items loading…
