Static Analysis
Showing 36 of 865 projects
A fast semantic search tool for C/C++ codebases that uses AST pattern matching to help security researchers find interesting functionality.
PHP core functions rewritten to throw exceptions instead of returning false on errors.
Guidelines, best practices, and training material for writing secure smart contracts across multiple blockchain platforms.
Guidelines, best practices, and training material for writing secure smart contracts across multiple blockchain platforms.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
A SpotBugs plugin for detecting security vulnerabilities in Java web and Android applications.
A set of tools and APIs for static analysis, code visualization, navigation, and style-preserving source transformations across multiple languages.
A framework and CLI tool for interacting with SourceKit to parse Swift AST, extract docs, and analyze Swift/Objective-C code.
ESLint plugin that identifies potential security vulnerabilities in Node.js code, requiring human triage for false positives.
An HTML linter that checks for common mistakes and ensures correct Bootstrap markup structure.
A command-line tool for quickly measuring the size and complexity of PHP projects.
A set of sniffs for PHP_CodeSniffer that checks PHP code for cross-version compatibility.
A suite of utilities and libraries for analyzing binary programs, supporting multiple architectures and offering symbolic execution.
A PHP mutation testing framework that evaluates test suite quality by injecting faults into source code.
Mutation testing for Ruby that systematically modifies code to verify test effectiveness, especially important with AI-generated code.
A static code analyzer for PowerShell that checks scripts and modules against best practice rules.
A Ruby gem that manages translation and localization with static analysis to find missing and unused i18n keys.
A static analysis tool for Go that finds vulnerabilities using SSA form and source-to-sink tracing to reduce false positives.
A Cargo subcommand to find unused dependencies in Rust projects' Cargo.toml files.
A fast, feature-rich language server extension for Python in Visual Studio Code, providing IntelliSense, type checking, and code navigation.
A fast, accurate static code analyzer for C/C++, C#, and Lua that detects defects early in development.
A Ruby-based tool to check Markdown files and flag style issues with configurable rules.
A Ruby-based tool to check Markdown files and flag style issues with configurable rules.
A Go tool that generates PlantUML class diagrams from Go source code to visualize project structure and relationships.
A highly extensible Go source code linter providing opinionated checks for bugs, performance, and style issues.
A static analyzer and linter for Lua code that detects undefined globals, unused variables, and other common issues.
A code linting framework for Sublime Text that integrates external linters to provide real-time error highlighting.
A code linting framework for Sublime Text that provides real-time error highlighting and diagnostics.
Various code metrics for Python code
A curated collection of Python type checkers, stub packages, tools, and resources for static and dynamic type checking.
A curated collection of Python type checkers, stub packages, tools, and resources for static and dynamic type checking.
PEP-484 type stubs and a mypy plugin for precise static type checking in Django projects.
A metaprogramming library for analyzing and transforming Java source code via a well-designed AST.
A static binary code analysis toolkit for reverse engineers, featuring value/taint analysis, type reconstruction, and memory vulnerability detection.
A static analyzer and linter for Clojure, ClojureScript, and EDN that detects errors and enforces style without executing code.
A Ruby command-line tool that suggests performance improvements by analyzing code patterns against faster alternatives.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.