Static Analysis
Showing 36 of 865 projects
A Visual Studio Code extension for linting and style checking Markdown files with a comprehensive rule set.
A pure Go library for parsing, generating, and analyzing LLVM IR assembly.
A PHPStan extension for verifying architectural rules in PHP code using natural language definitions.
A static code analyzer for JavaScript, TypeScript, and CSS that detects quality and security issues.
FlowDroid Static Data Flow Tracker
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
A PHP reflection API that improves upon the native one with features like reflecting on unloaded classes and extracting ASTs.
An ESLint plugin providing linting rules to enforce consistent and valid JSDoc comments in JavaScript and TypeScript code.
An efficient Android vulnerability scanner that finds security issues and missing best practices in APK files.
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
An ESLint plugin that validates GraphQL query strings against a schema in JavaScript and .graphql files.
An ESLint plugin that validates GraphQL query strings against a schema for Apollo, Relay, Lokka, and FraQL clients.
A configurable linter and analyzer for Makefiles that scans for potential issues and enforces best practices.
Run Python linters and formatters like ruff, black, and mypy directly on Jupyter Notebooks.
A Ruby gem that detects inconsistencies between ActiveRecord models and database schema to prevent data issues.
A Roslyn analyzer for C# that enforces good practices in design, usage, security, performance, and style.
An ESLint plugin that enforces best practices and catches common errors in Jest test suites.
An open dataset and toolkit for training static PE malware machine learning models, featuring millions of labeled Windows executable samples.
An open dataset and toolkit for training static PE malware machine learning models, featuring extracted features from millions of Windows executable files.
Interactive Delphi Reconstructor (IDR) is a decompiler for Delphi-compiled Windows executables and DLLs, focusing on static analysis.
A pluggable type-checking framework for Java that detects and prevents bugs through custom type qualifiers.
A Roslyn-based analyzer library for C# and VB that provides refactorings, code analysis, and diagnostics.
A static analyzer for PE executables that identifies malicious indicators and aids in malware assessment.
A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.
A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
A Roslyn tool that generates C# syntax tree API calls from C# source code.
A Clojure linter that uses tools.analyzer for accurate bug detection, focusing on CI environments.
ESLint plugin providing linting rules for Flow type annotations in JavaScript code.
A static analysis tool to identify security misconfigurations and anti-patterns in Electron applications.
A collection of remark plugins to lint and enforce consistent Markdown code style.
An opinionated linter for Dockerfiles that enforces best practices and catches common mistakes.
A CLI tool that detects soft dependencies in PHP projects by checking for symbols not declared in composer.json.
A security linting framework with IDE plugins and CLI tools that identifies vulnerabilities as developers write code.
A security linting framework with IDE plugins and CLI tools that detects vulnerabilities as developers write code.
A Python framework for disassembly, static analysis, symbolic execution, and debugging of binaries and malware.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.