Static Analysis
Showing 36 of 865 projects
A comprehensive ESLint configuration with 1,000+ rules (40% auto-fixable) to enforce consistent JavaScript/TypeScript code style.
A fast, zero-dependency PHP tool that detects unused, shadow, and misplaced Composer dependencies.
An ESLint plugin providing rules for AngularJS applications to enforce best practices, conventions, and error prevention.
An extensible software model checking framework for Java bytecode programs to detect concurrency defects and runtime errors.
A GitHub Action that detects and automatically fixes lint errors across many programming languages and tools.
A pluginable code comprehension tool for large-scale C/C++, C#, and Python software with deep parsing and visualization.
A deprecated GitHub Action for scanning code with SonarQube Cloud to detect quality and security issues.
A static analysis library for Clojure that catches clojure.spec conform errors at compile time.
A Composer plugin that automatically installs and configures PHP_CodeSniffer coding standards.
A JSON dataset of global identifiers from different JavaScript environments for static analysis tools.
A static analysis tool for Rust that detects concurrency bugs, memory bugs, and panic locations.
Mypy plugin and type stubs for SQLAlchemy to enable precise static type checking in Python.
A static analysis tool that detects magic numbers in PHP code to improve readability and maintainability.
A static analysis tool that scans C/C++ source code for potential security vulnerabilities using lexical scanning.
An ESLint plugin to lint JavaScript, JSX, TypeScript, and other code blocks within Markdown documents.
Reports unused function parameters and results in Go code while minimizing false positives.
A Gulp plugin that integrates ESLint into your build pipeline to lint JavaScript files.
A command-line tool that runs multiple PHP static analysis and quality assurance tools with a single command.
A fast scanning and attack toolkit for identifying and exploiting GitHub Actions vulnerabilities at scale.
A static code analysis tool for Crystal that enforces code style and catches code smells.
A Scala compiler plugin for static code analysis that detects bugs, non-idiomatic code, and style violations.
A static application security testing (SAST) CLI tool that scans source code for OWASP Top 10 vulnerabilities across multiple programming languages.
Templates and tools for building Roslyn-based analyzers, code fixes, and Visual Studio extensions.
A RubyCritic extension that calculates a SkunkScore to identify the most complex code with the least test coverage for refactoring prioritization.
A Maven plugin that identifies and prioritizes God Classes, Highly Coupled classes, and Class Cycles in Java codebases for refactoring.
A Go tool that automatically fills in zero-value return statements to match function signatures, saving development time.
A static analysis tool that detects architectural flaws and dependency issues in PHP applications before they become maintenance nightmares.
A Java library for static malware analysis of Portable Executable files with robust handling of malformations.
A static code analyzer that detects and reports potential malicious behaviors in Android applications.
A CLI tool that analyzes web components and generates documentation in multiple formats.
A text file analysis tool that detects non-inclusive language in source code and suggests inclusive alternatives.
A language server implementation for the Luau programming language, providing IDE features like autocomplete and type checking.
A static analysis tool for Go that validates raw SQL queries to catch syntax errors and prevent SQL injections.
A library that detects refactorings and generates AST diffs for Java, Python, and Kotlin code changes.
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
A PHPStan extension that detects unused PHP code (methods, constants, properties, enum cases) and can automatically remove it.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.