Static Analysis
Showing 36 of 865 projects
A semi-static Python type checker that imports modules to understand dynamic constructs and enable plugin extensions.
A static security scanner for PHP code that identifies potential vulnerabilities without executing the code.
A framework for automated extraction of static and dynamic features from Android APKs for malware detection.
A Go tool that analyzes and fixes fmt.Errorf() calls to use the new %w error-wrapping verb directive.
An automated static analysis engine for PHP that performs automated code reviews and identifies issues.
Command line tool that detects unused resource strings in iOS or macOS applications.
A transpiler that converts C source code into Go source code, enabling migration of C projects to Go.
A kernel fuzzer that specifically targets race condition bugs in operating system kernels.
A Go linter that checks if errors from external packages are properly wrapped to improve debugging.
A PHPStan extension for static analysis of Blade templates in Laravel projects.
A set of Magento-specific rules for PHP_CodeSniffer to enforce coding standards in Magento 2 projects.
A Java bytecode analyzer that detects and blocks forbidden API calls during builds with Ant, Maven, or Gradle.
A Go tool for detecting code clones in Go source files using suffix trees on serialized ASTs.
A static code analysis tool for detecting code smells and best practice violations in Vue.js and Nuxt.js projects.
A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.
A linter for Firefox WebExtensions that validates add-ons for security, performance, and policy compliance.
A security scanning CLI tool that detects vulnerabilities, secrets, and outdated dependencies across multiple programming languages.
A Python tool that automatically generates type annotations by monitoring runtime execution, with low overhead and tensor shape inference.
A Go linter that enforces consistent whitespace and empty line usage to improve code readability.
A parallel PHP syntax checker with multiple output formats and Git blame integration.
A static analysis tool for Android applications that detects security vulnerabilities through inter-procedure and intra-procedure analysis.
A community wiki curating static analysis tools (linters) for improving code quality across programming languages and formats.
A stateless model checking tool for Erlang programs that systematically tests for concurrency errors.
An ESLint plugin providing additional rules for Node.js-specific code patterns and best practices.
A tool to scan projects for regexes vulnerable to catastrophic backtracking (REDOS) through static extraction, detection, and validation.
A multi-language static call graph generator that parses source code to visualize function dependencies across 20+ programming languages.
A linting tool for HAML that enforces style consistency and integrates with RuboCop for static analysis.
A linter for Nix package expressions that identifies common mistakes and provides explanations for Nixpkgs contributors.
A language server implementing the Language Server Protocol for Crystal, providing code analysis and editor integration.
A static analysis tool for F# that enforces coding conventions, detects code smells, and checks formatting rules.
An automatic formal verification tool that uses separation logic to verify memory safety of C programs.
A CLI tool that unifies multiple PHP quality assurance and static analysis tools under a single command interface.
A static analysis tool for Go that checks whether HTTP response bodies are properly closed to enable TCP connection reuse.
A Go static analysis tool that finds repeated string and number literals that could be replaced by constants.
A programming language and verification toolset for engineering high-reliability, safety-critical, and secure applications.
An automatic bug-finding tool for C, C++, Go, Rust, and Zig using WebAssembly-level symbolic execution.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.