Static Analysis
Showing 36 of 865 projects
A fast, zero-dependency PHP tool that detects unused, shadow, and misplaced Composer dependencies.
A comprehensive ESLint configuration with 1,000+ rules (40% auto-fixable) to enforce consistent JavaScript/TypeScript code style.
An ESLint plugin providing rules for AngularJS applications to enforce best practices, conventions, and error prevention.
An extensible software model checking framework for Java bytecode programs to detect concurrency defects and runtime errors.
A pluginable code comprehension tool for large-scale C/C++, C#, and Python software with deep parsing and visualization.
A GitHub Action that detects and automatically fixes lint errors across many programming languages and tools.
A deprecated GitHub Action for scanning code with SonarQube Cloud to detect quality and security issues.
A JSON dataset of global identifiers from different JavaScript environments for static analysis tools.
A static analysis library for Clojure that catches clojure.spec conform errors at compile time.
A Composer plugin that automatically installs and configures PHP_CodeSniffer coding standards.
A static analysis tool for Rust that detects concurrency bugs, memory bugs, and panic locations.
A static analysis tool that detects magic numbers in PHP code to improve readability and maintainability.
Mypy plugin and type stubs for SQLAlchemy to enable precise static type checking in Python.
A fast scanning and attack toolkit for identifying and exploiting GitHub Actions vulnerabilities at scale.
A static analysis tool that scans C/C++ source code for potential security vulnerabilities using lexical scanning.
An ESLint plugin to lint JavaScript, JSX, TypeScript, and other code blocks within Markdown documents.
Reports unused function parameters and results in Go code while minimizing false positives.
A Gulp plugin that integrates ESLint into your build pipeline to lint JavaScript files.
A command-line tool that runs multiple PHP static analysis and quality assurance tools with a single command.
A static code analysis tool for Crystal that enforces code style and catches code smells.
A Scala compiler plugin for static code analysis that detects bugs, non-idiomatic code, and style violations.
A static application security testing (SAST) CLI tool that scans source code for OWASP Top 10 vulnerabilities across multiple programming languages.
A RubyCritic extension that calculates a SkunkScore to identify the most complex code with the least test coverage for refactoring prioritization.
Templates and tools for building Roslyn-based analyzers, code fixes, and Visual Studio extensions.
Open-source static analysis tool for Python, TypeScript, and Go that detects dead code, security vulnerabilities, and AI-generated regressions.
A Maven plugin that identifies and prioritizes God Classes, Highly Coupled classes, and Class Cycles in Java codebases for refactoring.
A Go tool that automatically fills in zero-value return statements to match function signatures, saving development time.
A static analysis tool that detects architectural flaws and dependency issues in PHP applications before they become maintenance nightmares.
A Java library for static malware analysis of Portable Executable files with robust handling of malformations.
A static code analyzer that detects and reports potential malicious behaviors in Android applications.
A language server implementation for the Luau programming language, providing IDE features like autocomplete and type checking.
A CLI tool that analyzes web components and generates documentation in multiple formats.
A text file analysis tool that detects non-inclusive language in source code and suggests inclusive alternatives.
A PHPStan extension that detects unused PHP code (methods, constants, properties, enum cases) and can automatically remove it.
A library that detects refactorings and generates AST diffs for Java, Python, and Kotlin code changes.
A static analysis tool for Go that validates raw SQL queries to catch syntax errors and prevent SQL injections.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.