Static Analysis
Showing 36 of 865 projects
A static analysis tool for Go that validates raw SQL queries to catch syntax errors and prevent SQL injections.
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
An ESLint plugin that suggests dependency optimizations, native alternatives, and detects redundant polyfills.
A universal code formatter that uses machine learning to learn formatting patterns from a corpus of existing code.
An extremely strict yet practical ESLint configuration with 51 plugins and over 1300 rules for JavaScript, TypeScript, React, Vue, and Node.js.
Detects ineffectual assignments in Go code where variables are assigned but never used.
A static analyzer and linter for Lua code that detects undefined globals, unused variables, and other issues.
A CLI tool that groups ESLint errors by rule and provides per-rule actions like auto-fix and disable comments to efficiently handle large linting outputs.
A Java library for calculating class-level and method-level code metrics via static analysis, without requiring compiled code.
An ESLint plugin to extract and lint inline JavaScript scripts from HTML and XML files.
A Go library that uses static and stack-trace analysis to pinpoint errors and speed up debugging.
A language server implementation for the Elm programming language providing IDE features like diagnostics, formatting, and code navigation.
A static code analyzer that validates TODO comments by linking them to open issues in supported issue trackers.
A static race detector for Go that analyzes code without execution to find data races in pointers and concurrency patterns.
A PHP tool that compares two source code sets and suggests the appropriate semantic version (MAJOR, MINOR, PATCH) based on detected changes.
A command-line Erlang style reviewer that enforces code consistency and readability across your codebase.
An ESLint plugin for linting Astro components, covering frontmatter, HTML templates, JSX expressions, client-side scripts, and directives.
A secure, extensible command-line Android APK vulnerability analyzer written in Rust for automated security testing.
A Gulp plugin that integrates JSHint for linting JavaScript files in your build pipeline.
A linter, debugger, and language server for Rego that identifies mistakes, enforces best practices, and enhances policy development.
A static analysis tool for Elm code that identifies deficiencies and enforces best practices.
An interactive, retargetable disassembler with IDAPython-compatible plugin API for static analysis and reverse engineering.
CMake modules to enable compiler sanitizers (AddressSanitizer, MemorySanitizer, etc.) for C/C++/Fortran projects.
Official ESLint plugin for Svelte, providing linting rules and best practices for Svelte components.
A Python sandbox that automatically collects, analyzes, and reports runtime indicators of Linux malware through static, dynamic, and memory analysis.
A front-end for the C programming language that simplifies code for analysis and transformation.
An ESLint plugin that runs Flow type checking as ESLint errors, enabling Flow support in any ESLint-compatible editor.
Automatically configures ESLint rules and plugins based on your project's dependencies.
A community-driven style guide for Elixir, implemented as checks in the Credo static analysis tool.
A Maven plugin that detects uses of legacy Java APIs in your codebase, promoting modern, performant, and idiomatic alternatives.
Go bindings for the YARA pattern matching library, providing a Go-native interface to YARA's C API.
A static analysis tool that scans PHP projects for usages of deprecated code, with special support for Symfony.
A Go tool that identifies and removes unnecessary type conversions from Go source code.
A semi-static Python type checker that imports modules to understand dynamic constructs and enable plugin extensions.
A fuzzer for Linux kernel drivers that combines interface recovery via LLVM analysis with a fuzzing engine to find security vulnerabilities.
A lightweight static analyzer for developers that finds code patterns across multiple programming languages.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.