Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
Malcat malcat.fr
copyright: — Hexadecimal editor and disassembler for malware analysis and binary file inspection. Supports over 50 file formats and multiple CPU architectures (x86/x64, MIPS, .NET, Python, VB p-code). Features rapid analysis, embedded file extraction, Yara signature scanning…
-
mago mago.carthage.software
Mago is a complete toolchain for PHP, written in Rust, designed from the ground up for maximum performance.
-
pyscn ludo-technologies.github.io
Intelligent Python code quality analyzer with CFG-based cyclomatic complexity analysis, dead code detection, clone detection (Type 1-4), and coupling metrics. Uses tree-sitter for parsing. Written in Go.
-
kube-score kube-score.com
Static code analysis of your Kubernetes object definitions.
-
Stan kowainik.github.io
Stan is a command-line tool for analysing Haskell projects and outputting discovered vulnerabilities in a helpful way with possible solutions for detected problems.
-
KLEE klee.github.io
A dynamic symbolic execution engine built on top of the LLVM compiler infrastructure. It can auto-generate test cases for programs such that the test cases exercise as much of the program as possible.
-
Kiuwan kiuwan.com
copyright: — Identify and remediate cyber threats in a blazingly fast, collaborative environment, with seamless integration in your SDLC. Python, C\C++, Java, C#, PHP and more.
-
Kin kinlab.ai
A graph-native code repository for people and AI agents. Kin parses supported languages into code entities and their relationships (calls, references, imports, inheritance) and versions them with the source. The kin CLI and an MCP server query the same graph for callers…
-
kics kics.io
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your infrastructure-as-code. Supports Terraform, Kubernetes, Docker, AWS CloudFormation and Ansible
-
ezno kaleidawave.github.io
A JavaScript compiler and TypeScript checker written in Rust with a focus on static analysis and runtime performance. Ezno's type checker is built from scratch. The checker is fully compatible with TypeScript type annotations and can work without any type annotations at all.
-
jscpd jscpd.dev
Copy/paste detector for programming source code. Finds duplicated blocks in 200+ file formats — JavaScript, TypeScript, Python, Java, C#, C/C++, Go, Rust, PHP, Ruby and more — using token-based detection. Supports configurable thresholds and ignore patterns, git blame…
-
jQAssistant jqassistant.org
jQAssistant is a plugin based software analytics platform which allows scanning code structures and metadata from repositories into a Neo4j graph database. The gathered data can be used for ad-hoc exploration using queries, visualization or defining rules for continuous…
-
Joern joern.io
Joern is a platform for analyzing source code, bytecode, and binary executables. It generates code property graphs (CPGs), a graph representation of code for cross-language code analysis. Code property graphs are stored in a custom graph database. This allows code to be mined…
-
ReSharper jetbrains.com
copyright: — Extends Visual Studio with on-the-fly code inspections for C#, VB.NET, ASP.NET, JavaScript, TypeScript and other technologies.
-
jedi jedi.readthedocs.io
Autocompletion/static analysis library for Python.
-
Inkog inkog.io
AI agent security scanner. Detects behavioral vulnerabilities (prompt injection, infinite loops, token bombing, SQL injection via LLM) across 11 framework adapters including LangChain, CrewAI, and pydantic-ai. Audits MCP servers. Maps findings to EU AI Act, OWASP LLM Top 10…
-
Soto Platform hello2morrow.com
copyright: — Suite of static analysis tools consisting of the three components Sotoarc (Architecture Analysis), Sotograph (Quality Analysis), and Sotoreport (Quality report). Helps find differences between architecture and implementation, interface violations (e.g. external…
-
Haxe Checkstyle haxecheckstyle.github.io
A static analysis tool to help developers write Haxe code that adheres to a coding standard.
-
PullRequest hackerone.com
copyright: — Code review as a service with built-in static analysis. Increase velocity and reduce technical debt through quality code review by expert engineers backed by best-in-class automation.
-
pytype google.github.io
A static type analyzer for Python code.
-
govulncheck go.dev
Govulncheck reports known vulnerabilities that affect Go code. It uses static analysis of source code or a binary's symbol table to narrow down reports to only those that could affect the application. By default, govulncheck makes requests to the Go vulnerability database at…
-
this issue github.com
for more details. typescript-eslint is now your best option for linting TypeScript. TSLint is an extensible static analysis tool that checks TypeScript code for readability, maintainability, and functionality errors. It is widely supported across modern editors & build systems…
-
:information_source: github.com
warning: — Detect errors and potential problems in JavaScript code and enforce your team's coding conventions.
-
HasMySecretLeaked gitguardian.com
copyright: — HasMySecretLeaked is a project from GitGuardian that aims to help individual users and organizations search across 20 million exposed secrets to verify if their developer secrets have leaked on public repositories, gists, and issues on GitHub projects.
-
rector getrector.org
Instant Upgrades and Automated Refactoring of any PHP 5.3+ code. It upgrades your code for PHP 7.4, 8.0 and beyond. Rector promises a low false-positive rate because it looks for narrowly defined AST (abstract syntax tree) patterns. The main use-case are tackling technical debt…
-
CodeFlow getcodeflow.com
copyright: — Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)
-
GCC gcc.gnu.org
The GCC compiler has static analysis capabilities since version 10. This option is only available if GCC was configured with analyzer support enabled. It can also output its diagnostics to a JSON file in the SARIF format (from v13).
-
fta ftaproject.dev
Rust-based static analysis for TypeScript projects
-
Fixinator fixinator.app
copyright: — Static security code analysis for ColdFusion or CFML code. Designed to work within a CI pipeline or from the developers terminal.
-
Fallow fallow.tools
Rust-native static analysis for JavaScript and TypeScript. Maps a repository as one dependency graph to find unused code and structural problems across file boundaries. Runs from the CLI or GitHub Actions, with VS Code, LSP, MCP, and Node API integrations.
-
ESBMC esbmc.org
ESBMC is an open source, permissively licensed, context-bounded model checker based on satisfiability modulo theories for the verification of single- and multi-threaded C/C++ programs.
-
dialyzer erlang.org
The DIALYZER, a DIscrepancy AnaLYZer for ERlang programs. Dialyzer is a static analysis tool that identifies software discrepancies, such as definite type errors, code that has become dead or unreachable because of programming error, and unnecessary tests, in single Erlang…
-
Embold embold.io
copyright: — Intelligent software analytics platform that identifies design issues, code issues, duplication and metrics. Supports Java, C, C++, C#, JavaScript, TypeScript, Python, Go, Kotlin and more.
-
cargo-deny embarkstudios.github.io
A cargo plugin for linting your dependencies. It can be used either as a command line too, a Rust crate, or a Github action for CI. It checks for valid license information, duplicate crates, security vulnerabilities, and more.
-
dotenv-linter (Rust) dotenv-linter.github.io
Lightning-fast linter for .env files. Written in Rust
-
ty docs.astral.sh
An extremely fast Python type checker written in Rust.
-
Diffblue diffblue.com
copyright: — Diffblue is a software company that provides AI-powered code analysis and testing solutions for software development teams. Its technology helps developers automate testing, find bugs, and reduce manual labor in their software development processes. The company's…
-
diff.rs diff.rs
Web application (WASM) to render a diff between Rust crate versions.
-
CodeRush devexpress.com
copyright: — Code creation, debugging, navigation, refactoring, analysis and visualization tools that use the Roslyn engine in Visual Studio 2015 and up.
-
Closure Compiler developers.google.com
A compiler tool to increase efficiency, reduce size, and provide code warnings in JavaScript files.
-
DesigniteJava designite-tools.com
copyright: — DesigniteJava supports detection of various architecture, design, and implementation smells along with computation of various code quality metrics.
-
Music Information Retrieval Using Locality Sensitive Hashing youtube.com
Steve Tjoa (RackSpace Developers) [This talk shows that IR is not just text and images].
-
Knowledge base acceleration trec.nist.gov
Study algorithms that improve efficiency of human Knowledge Base.
-
TREC Collections trec.nist.gov
TREC is the benchmark dataset used by most IR and Web search algorithms. It has several tracks, each of which consists of dataset to test for a specific task. The tracks along with suggested use-case are:
-
Apache Lucene lucene.apache.org
Open Source Search Engine that can be used to test Information Retrieval Algorithm. Twitter uses this core for its real-time search.
-
Lemur Toolkit lemurproject.org
Open Source Toolkit for research in Language Modeling, filtering and categorization.
-
Indri Search Engine lemurproject.org
Another Open Source Search Engine competitor of Apache Lucene.
-
The Lemur Project lemurproject.org
The Lemur Project develops search engines, browser toolbars, text analysis tools, and data resources that support research and development of information retrieval and text mining software.
-
DerScanner derscanner.com
copyright: — Multi-language Static Application Security Testing (SAST) platform that detects critical vulnerabilities, including hardcoded secrets, weak cryptography, backdoors, SQL injections, insecure configurations, etc.
-
DepWarden depwarden.in
copyright: — Free, anonymous SCA + SAST scanner. SCA: scans npm, PyPI, Maven, Go, Cargo, Ruby, NuGet dependencies for CVEs (OSV/KEV/EPSS), typosquats and supply-chain risk. SAST: pattern + taint analysis for 15 languages, 300+ rules. No account, no source upload. Available as a…
- next page of items loading…
