Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
pyrefly pyrefly.org
A fast, incremental type checker and language server for Python, providing IDE features like code navigation, semantic highlighting, and code completion.
-
Pysa pyre-check.org
A tool based on Facebook's pyre-check to identify potential security issues in Python code identified with taint analysis.
-
pyre-check pyre-check.org
A fast, scalable type checker for large Python codebases. Pyre-check has been superseded by Pyrefly, its next iteration.
-
fprettify pypi.python.org
Auto-formatter for modern fortran source code, written in Python. Fprettify is a tool that provides consistent whitespace, indentation, and delimiter alignment in code, including the ability to change letter case and handle preprocessor directives, all while preserving revision…
-
pyflakes pypi.org
Check Python source files for errors.
-
autopep8 pypi.org
A tool that automatically formats Python code to conform to the PEP 8 style guide. It uses the pycodestyle utility to determine what parts of the code needs to be formatted.
-
pylint pylint.pycqa.org
Looks for programming errors, helps enforcing a coding standard and sniffs for some code smells. It additionally includes pyreverse (an UML diagram generator) and symilar (a similarities checker).
-
pycodestyle pycodestyle.pycqa.org
(Formerly pep8) Check Python code against some of the style conventions in PEP 8.
-
pyanalyze pyanalyze.readthedocs.io
A tool for programmatically detecting common mistakes in Python code, such as references to undefined variables and type errors. It can be extended to add additional rules and perform checks specific to particular functions.
-
PVS-Studio pvs-studio.com
copyright: — PVS-Studio is a SAST tool that enhances code quality, security, and safety. Supported languages: C, C++, C#, Java, Go, JavaScript and TypeScript. Works on Windows, macOS, Linux. Supports intermodular, incremental, data flow analysis, taint analysis. Provides…
-
solhint protofire.github.io
Solhint is an open source project created by https://protofire.io. Its goal is to provide a linting utility for Solidity code.
-
PMD pmd.github.io
A source code analyzer for Java, Salesforce Apex, Javascript, PLSQL, XML, XSL and others.
-
Cloud (IaC) Security for JetBrains IDEs plugins.jetbrains.com
Cloud (IaC) Security plugin for JetBrains IDEs. Performs real-time inspections of Docker & Kubernetes IaC with 50+ rules based on Docker image/build security best practices, Kubernetes Pod Security Standards, and NSA/CISA Kubernetes Hardening Guidance.
-
Doop plast-lab.github.io
Doop is a declarative framework for static analysis of Java/Android programs, centered on pointer analysis algorithms. Doop provides a large variety of analyses and also the surrounding scaffolding to run an analysis end-to-end (fact generation, processing, statistics, etc.).
-
gotype pkg.go.dev
Syntactic and semantic analysis similar to the Go compiler.
-
Helix QAC perforce.com
copyright: — Enterprise-grade static analysis for embedded software. Supports MISRA, CERT, and AUTOSAR coding standards.
-
pdepend pdepend.org
Calculates software metrics like cyclomatic complexity for PHP code.
-
parasoft parasoft.com
copyright: — Automated Software Testing Solutions for unit-, API-, and web UI testing. Complies with MISRA, OWASP, and others.
-
elm-review package.elm-lang.org
Analyzes whole Elm projects, with a focus on shareable and custom rules written in Elm that add guarantees the Elm compiler doesn't give you.
-
OWASP Source Code Analysis Tools owasp.org
List of tools maintained by the Open Web Application Security Project
-
Fortify opentext.com
copyright: — A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby…
-
DrNim nim-lang.org
DrNim combines the Nim frontend with the Z3 proof engine in order to allow verify / validate software written in Nim.
-
MOPSA mopsa.lip6.fr
A static analyzer designed to easily reuse abstract domains across widely different languages (such as C and Python).
-
Mobb mobb.ai
copyright: — Mobb is a trusted, automatic vulnerability fixer that secures applications, reduces security backlogs, and frees developers to focus on innovation. Mobb is free for open-source projects.
-
Griffe mkdocstrings.github.io
Signatures for entire Python programs. Extract the structure, the frame, the skeleton of your project, to generate API documentation or find breaking changes in your API.
-
Polyspace Bug Finder mathworks.com
copyright: — Identifies run-time errors, concurrency issues, security vulnerabilities, and other defects in C and C++ embedded software.
-
Malcat malcat.fr
copyright: — Hexadecimal editor and disassembler for malware analysis and binary file inspection. Supports over 50 file formats and multiple CPU architectures (x86/x64, MIPS, .NET, Python, VB p-code). Features rapid analysis, embedded file extraction, Yara signature scanning…
-
mago mago.carthage.software
Mago is a complete toolchain for PHP, written in Rust, designed from the ground up for maximum performance.
-
pyscn ludo-technologies.github.io
Intelligent Python code quality analyzer with CFG-based cyclomatic complexity analysis, dead code detection, clone detection (Type 1-4), and coupling metrics. Uses tree-sitter for parsing. Written in Go.
-
kube-score kube-score.com
Static code analysis of your Kubernetes object definitions.
-
Stan kowainik.github.io
Stan is a command-line tool for analysing Haskell projects and outputting discovered vulnerabilities in a helpful way with possible solutions for detected problems.
-
KLEE klee.github.io
A dynamic symbolic execution engine built on top of the LLVM compiler infrastructure. It can auto-generate test cases for programs such that the test cases exercise as much of the program as possible.
-
Kiuwan kiuwan.com
copyright: — Identify and remediate cyber threats in a blazingly fast, collaborative environment, with seamless integration in your SDLC. Python, C\C++, Java, C#, PHP and more.
-
Kin kinlab.ai
A graph-native code repository for people and AI agents. Kin parses supported languages into code entities and their relationships (calls, references, imports, inheritance) and versions them with the source. The kin CLI and an MCP server query the same graph for callers…
-
kics kics.io
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your infrastructure-as-code. Supports Terraform, Kubernetes, Docker, AWS CloudFormation and Ansible
-
ezno kaleidawave.github.io
A JavaScript compiler and TypeScript checker written in Rust with a focus on static analysis and runtime performance. Ezno's type checker is built from scratch. The checker is fully compatible with TypeScript type annotations and can work without any type annotations at all.
-
jscpd jscpd.dev
Copy/paste detector for programming source code. Finds duplicated blocks in 200+ file formats — JavaScript, TypeScript, Python, Java, C#, C/C++, Go, Rust, PHP, Ruby and more — using token-based detection. Supports configurable thresholds and ignore patterns, git blame…
-
jQAssistant jqassistant.org
jQAssistant is a plugin based software analytics platform which allows scanning code structures and metadata from repositories into a Neo4j graph database. The gathered data can be used for ad-hoc exploration using queries, visualization or defining rules for continuous…
-
Joern joern.io
Joern is a platform for analyzing source code, bytecode, and binary executables. It generates code property graphs (CPGs), a graph representation of code for cross-language code analysis. Code property graphs are stored in a custom graph database. This allows code to be mined…
-
ReSharper jetbrains.com
copyright: — Extends Visual Studio with on-the-fly code inspections for C#, VB.NET, ASP.NET, JavaScript, TypeScript and other technologies.
-
jedi jedi.readthedocs.io
Autocompletion/static analysis library for Python.
-
Inkog inkog.io
AI agent security scanner. Detects behavioral vulnerabilities (prompt injection, infinite loops, token bombing, SQL injection via LLM) across 11 framework adapters including LangChain, CrewAI, and pydantic-ai. Audits MCP servers. Maps findings to EU AI Act, OWASP LLM Top 10…
-
Soto Platform hello2morrow.com
copyright: — Suite of static analysis tools consisting of the three components Sotoarc (Architecture Analysis), Sotograph (Quality Analysis), and Sotoreport (Quality report). Helps find differences between architecture and implementation, interface violations (e.g. external…
-
Haxe Checkstyle haxecheckstyle.github.io
A static analysis tool to help developers write Haxe code that adheres to a coding standard.
-
PullRequest hackerone.com
copyright: — Code review as a service with built-in static analysis. Increase velocity and reduce technical debt through quality code review by expert engineers backed by best-in-class automation.
-
pytype google.github.io
A static type analyzer for Python code.
-
govulncheck go.dev
Govulncheck reports known vulnerabilities that affect Go code. It uses static analysis of source code or a binary's symbol table to narrow down reports to only those that could affect the application. By default, govulncheck makes requests to the Go vulnerability database at…
-
this issue github.com
for more details. typescript-eslint is now your best option for linting TypeScript. TSLint is an extensible static analysis tool that checks TypeScript code for readability, maintainability, and functionality errors. It is widely supported across modern editors & build systems…
-
:information_source: github.com
warning: — Detect errors and potential problems in JavaScript code and enforce your team's coding conventions.
-
HasMySecretLeaked gitguardian.com
copyright: — HasMySecretLeaked is a project from GitGuardian that aims to help individual users and organizations search across 20 million exposed secrets to verify if their developer secrets have leaked on public repositories, gists, and issues on GitHub projects.
- next page of items loading…
