Static Analysis
Showing 36 of 663 projects
A Go linter that checks if errors from external packages are properly wrapped to improve debugging.
A Java bytecode analyzer that detects and blocks forbidden API calls during builds with Ant, Maven, or Gradle.
A Go tool for detecting code clones in Go source files using suffix trees on serialized ASTs.
A PHPStan extension for static analysis of Blade templates in Laravel projects.
A security scanning CLI tool that detects vulnerabilities, secrets, and outdated dependencies across multiple programming languages.
A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.
A static code analysis tool for detecting code smells and best practice violations in Vue.js and Nuxt.js projects.
A Python tool that automatically generates type annotations by monitoring runtime execution, with low overhead and tensor shape inference.
A linter for Firefox WebExtensions that validates add-ons for security, performance, and policy compliance.
A parallel PHP syntax checker with multiple output formats and Git blame integration.
A static analysis tool for Android applications that detects security vulnerabilities through inter-procedure and intra-procedure analysis.
A community wiki curating static analysis tools (linters) for improving code quality across programming languages and formats.
A stateless model checking tool for Erlang programs that systematically tests for concurrency errors.
A tool to scan projects for regexes vulnerable to catastrophic backtracking (REDOS) through static extraction, detection, and validation.
A linting tool for HAML that enforces style consistency and integrates with RuboCop for static analysis.
An ESLint plugin providing additional rules for Node.js-specific code patterns and best practices.
A multi-language static call graph generator that parses source code to visualize function dependencies across 20+ programming languages.
A linter for Nix package expressions that identifies common mistakes and provides explanations for Nixpkgs contributors.
A language server implementing the Language Server Protocol for Crystal, providing code analysis and editor integration.
A CLI tool that unifies multiple PHP quality assurance and static analysis tools under a single command interface.
An automatic formal verification tool that uses separation logic to verify memory safety of C programs.
A static analysis tool for F# that enforces coding conventions, detects code smells, and checks formatting rules.
A static analysis tool for Go that checks whether HTTP response bodies are properly closed to enable TCP connection reuse.
A Go static analysis tool that finds repeated string and number literals that could be replaced by constants.
A Roslyn analyzer that detects common mistakes and enforces best practices in Serilog logging code.
An ESLint plugin that enforces logical consistency by transforming negated boolean expressions using De Morgan's laws.
ESLint plugin providing rules to enforce readable and proper arrow function definitions.
A programming language and verification toolset for engineering high-reliability, safety-critical, and secure applications.
An ESLint plugin for checking accessibility rules in Vue.js single-file components.
A zero-dependency tool to enforce module boundaries and dependency rules in TypeScript projects.
A collection of over 3,000 stub files for MicroPython ports and boards to enable code completion, static type checking, and faster development.
An automatic bug-finding tool for C, C++, Go, Rust, and Zig using WebAssembly-level symbolic execution.
ESLint parser and plugin for linting MDX files, including JavaScript/TypeScript code and markdown syntax.
A Java symbol solver that resolves type references and declarations in Java code by analyzing JavaParser ASTs.
A library that parses Delphi source code to generate abstract syntax trees for analysis and tooling.
An Elixir tool that analyzes database migrations to detect potentially dangerous or destructive operations.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.