Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Static Analysis

Static Analysis

865 projects

Showing 36 of 865 projects

Shisho
ShishoRust

A lightweight static analyzer for developers that finds code patterns across multiple programming languages.

#multi-language#developer-tools#terraform-security
Stars384
Forks13
Last commit3 years ago
AndroPyTool
AndroPyToolPython

A framework for automated extraction of static and dynamic features from Android APKs for malware detection.

#droidbox#flowdroid#android-malware-detection
Stars382
Forks67
Last commit3 years ago
Exakat
ExakatPHP

An automated static analysis engine for PHP that performs automated code reviews and identifies issues.

#exakat-engine#phar#php7
Stars380
Forks41
Last commit4 years ago
errwrap
errwrapGo

A Go tool that analyzes and fixes fmt.Errorf() calls to use the new %w error-wrapping verb directive.

#developer-tools#go-1.13#analyzer
Stars380
Forks16
Last commit1 year ago
Parse
ParsePHP

A static security scanner for PHP code that identifies potential vulnerabilities without executing the code.

#command-line-tool#vulnerability-detection#security
Stars379
Forks40
Last commit8 years ago
Magento Coding Standards
Magento Coding StandardsPHP

A set of Magento-specific rules for PHP_CodeSniffer to enforce coding standards in Magento 2 projects.

#magento2#rector-php#magento
Stars377
Forks165
Last commit2 months ago
Razzer
RazzerC

A kernel fuzzer that specifically targets race condition bugs in operating system kernels.

#operating-system-security#concurrency-bugs#syzkaller
Stars377
Forks62
Last commit7 years ago
Bladestan
BladestanPHP

A PHPStan extension for static analysis of Blade templates in Laravel projects.

#developer-tools#laravel#code-quality
Stars376
Forks31
Last commit14 days ago
c4go
c4goC

A transpiler that converts C source code into Go source code, enabling migration of C projects to Go.

#clang#compiler#c4go
Stars376
Forks41
Last commit2 years ago
abandoned-strings
abandoned-stringsSwift

Command line tool that detects unused resource strings in iOS or macOS applications.

#ios#code-cleanup#command-line-tool
Stars376
Forks64
Last commit5 years ago
wrapcheck
wrapcheckGo

A Go linter that checks if errors from external packages are properly wrapped to improve debugging.

#hacktoberfest#go-modules#go-linter
Stars373
Forks36
Last commit10 days ago
forbidden-apis
forbidden-apisJava

A Java bytecode analyzer that detects and blocks forbidden API calls during builds with Ant, Maven, or Gradle.

#gradle#build-tools#static-code-analysis
Stars372
Forks39
Last commit1 month ago
Progpilot
ProgpilotPHP

A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.

#taint-analysis#static-code-analysis#code-security
Stars371
Forks67
Last commit1 year ago
dupl
duplGo

A Go tool for detecting code clones in Go source files using suffix trees on serialized ASTs.

#suffix-tree#ast-analysis#developer-tools
Stars369
Forks24
Last commit7 months ago
wsl
wslGo

A Go linter that enforces consistent whitespace and empty line usage to improve code readability.

#readability#hacktoberfest#whitespace
Stars365
Forks46
Last commit9 days ago
Vue Mess Detector
Vue Mess DetectorTypeScript

A static code analysis tool for detecting code smells and best practice violations in Vue.js and Nuxt.js projects.

#code-smells#developer-tools#code-quality
Stars364
Forks15
Last commit5 days ago
addons-linter
addons-linterJavaScript

A linter for Firefox WebExtensions that validates add-ons for security, performance, and policy compliance.

#developer-tools#browser-extensions#security-scanning
Stars363
Forks164
Last commit2 days ago
Hawkeye
HawkeyeJavaScript

A security scanning CLI tool that detects vulnerabilities, secrets, and outdated dependencies across multiple programming languages.

#multi-language#pre-commit-hooks#secret-detection
Stars361
Forks84
Last commit5 years ago
RightTyper
RightTyperPython

A Python tool that automatically generates type annotations by monitoring runtime execution, with low overhead and tensor shape inference.

#runtime-monitoring#developer-tools#typing
Stars359
Forks10
Last commit1 month ago
parallel-lint
parallel-lintPHP

A parallel PHP syntax checker with multiple output formats and Git blame integration.

#command-line-tool#ci-cd#code-quality
Stars358
Forks26
Last commit3 months ago
linters
linters

A community wiki curating static analysis tools (linters) for improving code quality across programming languages and formats.

#developer-tools#security-scanning#programming-languages
Stars351
Forks29
Last commit7 months ago
Concuerror
ConcuerrorErlang

A stateless model checking tool for Erlang programs that systematically tests for concurrency errors.

#concurrent-erlang-programs#testing-tool#otp
Stars351
Forks43
Last commit4 months ago
JAADAS
JAADASJava

A static analysis tool for Android applications that detects security vulnerabilities through inter-procedure and intra-procedure analysis.

#soot-framework#vulnerability#taint-analysis
Stars349
Forks108
Last commit9 years ago
N
NJavaScript

An ESLint plugin providing additional rules for Node.js-specific code patterns and best practices.

#commonjs#es-modules#nodejs
Stars347
Forks67
Last commit6 days ago
vuln-regex-detector
vuln-regex-detectorPerl

A tool to scan projects for regexes vulnerable to catastrophic backtracking (REDOS) through static extraction, detection, and validation.

#programming-security#regex-security#security-scanning
Stars343
Forks28
Last commit
callGraph
callGraphPerl

A multi-language static call graph generator that parses source code to visualize function dependencies across 20+ programming languages.

#multi-language#basic#callgraph
Stars340
Forks32
Last commit1 year ago
haml-lint
haml-lintRuby

A linting tool for HAML that enforces style consistency and integrates with RuboCop for static analysis.

#developer-tools#rubocop#template-engine
Stars339
Forks112
Last commit23 days ago
nixpkgs-hammering
nixpkgs-hammeringNix

A linter for Nix package expressions that identifies common mistakes and provides explanations for Nixpkgs contributors.

#developer-tools#nix-overlays#code-quality
Stars339
Forks19
Last commit3 days ago
idalib
idalibRust

Idiomatic Rust bindings for the IDA SDK, enabling development of standalone binary analysis tools.

#security-tools#binary-analysis#rust-bindings
Stars333
Forks35
Last commit3 days ago
FSharpLint
FSharpLintF#

A static analysis tool for F# that enforces coding conventions, detects code smells, and checks formatting rules.

#dotnet-tool#code-smells#msbuild
Stars331
Forks75
Last commit1 month ago
spark-2014
spark-2014Ada

A programming language and verification toolset for engineering high-reliability, safety-critical, and secure applications.

#programming-language#safety-critical#software-verification
Stars330
Forks47
Last commit2 days ago
Owi
OwiOCaml

An automatic bug-finding tool for C, C++, Go, Rust, and Zig using WebAssembly-level symbolic execution.

#multi-language#concolic-execution#webassembly
Stars328
Forks41
Last commit6 days ago
scry
scryCrystal

A language server implementing the Language Server Protocol for Crystal, providing code analysis and editor integration.

#language-server#ide-integration#crystal-lang
Stars328
Forks31
Last commit3 years ago
SLAyer
SLAyerOCaml

An automatic formal verification tool that uses separation logic to verify memory safety of C programs.

#systems-programming#research-tool#program-verification
Stars326
Forks24
Last commit10 years ago
Sheriff
SheriffTypeScript

A zero-dependency tool to enforce module boundaries and dependency rules in TypeScript projects.

#modularization#module-boundaries#architecture-enforcement
Stars325
Forks32
Last commit25 days ago
phpqa - jmolivas
phpqa - jmolivasPHP

A CLI tool that unifies multiple PHP quality assurance and static analysis tools under a single command interface.

#pre-commit-hooks#analyzer#development-workflow
Stars323
Forks29
Last commit9 years ago
PreviousPage 13 of 25

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
4 years ago
Next
#Code Quality447
#Developer Tools323
#Linting187
#Javascript136
#Linter134
#Ci Cd118
#Eslint Plugin112
#Eslint96
#Python88
#Code Analysis86
#Typescript85
#Cli Tool77