Static Analysis
Showing 36 of 865 projects
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
An ESLint plugin that suggests dependency optimizations, native alternatives, and detects redundant polyfills.
A universal code formatter that uses machine learning to learn formatting patterns from a corpus of existing code.
Detects ineffectual assignments in Go code where variables are assigned but never used.
ArchUnitTS is an architecture testing library for TypeScript and JavaScript projects to specify and enforce architectural rules.
An extremely strict yet practical ESLint configuration with 51 plugins and over 1300 rules for JavaScript, TypeScript, React, Vue, and Node.js.
A CLI tool that groups ESLint errors by rule and provides per-rule actions like auto-fix and disable comments to efficiently handle large linting outputs.
A Go library that uses static and stack-trace analysis to pinpoint errors and speed up debugging.
An ESLint plugin to extract and lint inline JavaScript scripts from HTML and XML files.
A static analyzer and linter for Lua code that detects undefined globals, unused variables, and other issues.
A Java library for calculating class-level and method-level code metrics via static analysis, without requiring compiled code.
A language server implementation for the Elm programming language providing IDE features like diagnostics, formatting, and code navigation.
A static race detector for Go that analyzes code without execution to find data races in pointers and concurrency patterns.
A static code analyzer that validates TODO comments by linking them to open issues in supported issue trackers.
A PHP tool that compares two source code sets and suggests the appropriate semantic version (MAJOR, MINOR, PATCH) based on detected changes.
A command-line Erlang style reviewer that enforces code consistency and readability across your codebase.
An ESLint plugin for linting Astro components, covering frontmatter, HTML templates, JSX expressions, client-side scripts, and directives.
A secure, extensible command-line Android APK vulnerability analyzer written in Rust for automated security testing.
A Gulp plugin that integrates JSHint for linting JavaScript files in your build pipeline.
A static analysis tool for Elm code that identifies deficiencies and enforces best practices.
An interactive, retargetable disassembler with IDAPython-compatible plugin API for static analysis and reverse engineering.
CMake modules to enable compiler sanitizers (AddressSanitizer, MemorySanitizer, etc.) for C/C++/Fortran projects.
A Python sandbox that automatically collects, analyzes, and reports runtime indicators of Linux malware through static, dynamic, and memory analysis.
A front-end for the C programming language that simplifies code for analysis and transformation.
An ESLint plugin that runs Flow type checking as ESLint errors, enabling Flow support in any ESLint-compatible editor.
Official ESLint plugin for Svelte, providing linting rules and best practices for Svelte components.
Automatically configures ESLint rules and plugins based on your project's dependencies.
A linter, debugger, and language server for Rego that identifies mistakes, enforces best practices, and enhances policy development.
A community-driven style guide for Elixir, implemented as checks in the Credo static analysis tool.
A Maven plugin that detects uses of legacy Java APIs in your codebase, promoting modern, performant, and idiomatic alternatives.
A static analysis tool that scans PHP projects for usages of deprecated code, with special support for Symfony.
Go bindings for the YARA pattern matching library, providing a Go-native interface to YARA's C API.
A Go tool that identifies and removes unnecessary type conversions from Go source code.
A semi-static Python type checker that imports modules to understand dynamic constructs and enable plugin extensions.
A lightweight static analyzer for developers that finds code patterns across multiple programming languages.
A fuzzer for Linux kernel drivers that combines interface recovery via LLVM analysis with a fuzzing engine to find security vulnerabilities.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.