Static Analysis
Showing 36 of 615 projects
An ESLint plugin providing linting rules to enforce consistent and valid JSDoc comments in JavaScript and TypeScript code.
An ESLint plugin that validates GraphQL query strings against a schema in JavaScript and .graphql files.
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
Run Python linters and formatters like ruff, black, and mypy directly on Jupyter Notebooks.
A configurable linter and analyzer for Makefiles that scans for potential issues and enforces best practices.
A Ruby gem that detects inconsistencies between ActiveRecord models and database schema to prevent data issues.
An ESLint plugin that enforces best practices and catches common errors in Jest test suites.
An open dataset and toolkit for training static PE malware machine learning models, featuring extracted features from millions of Windows executable files.
An open dataset and toolkit for training static PE malware machine learning models, featuring millions of labeled Windows executable samples.
A Roslyn-based analyzer library for C# and VB that provides refactorings, code analysis, and diagnostics.
A Roslyn analyzer for C# that enforces good practices in design, usage, security, performance, and style.
A pluggable type-checking framework for Java that detects and prevents bugs through custom type qualifiers.
Interactive Delphi Reconstructor (IDR) is a decompiler for Delphi-compiled Windows executables and DLLs, focusing on static analysis.
A static analyzer for PE executables that identifies malicious indicators and aids in malware assessment.
A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
A Roslyn tool that generates C# syntax tree API calls from C# source code.
A Clojure linter that uses tools.analyzer for accurate bug detection, focusing on CI environments.
ESLint plugin providing linting rules for Flow type annotations in JavaScript code.
A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.
A static analysis tool to identify security misconfigurations and anti-patterns in Electron applications.
A collection of remark plugins to lint and enforce consistent Markdown code style.
An opinionated linter for Dockerfiles that enforces best practices and catches common mistakes.
A CLI tool that detects soft dependencies in PHP projects by checking for symbols not declared in composer.json.
A Python framework for disassembly, static analysis, symbolic execution, and debugging of binaries and malware.
A security linting framework with IDE plugins and CLI tools that detects vulnerabilities as developers write code.
A security linting framework with IDE plugins and CLI tools that identifies vulnerabilities as developers write code.
A Go tool that validates Clean Architecture rules like The Dependency Rule and module interactions in Go projects.
An ESLint plugin to disable mutation and promote functional programming in JavaScript and TypeScript.
A static code analyzer that detects security vulnerabilities in C# and VB.NET applications.
An ESLint plugin that enforces functional programming principles by restricting mutation and side effects.
A PHP parser written in Go that generates an abstract syntax tree for static analysis and tooling.
Removes unused imports and unused variables from Python code using pyflakes.
A tool for translating Dalvik bytecode to equivalent Java bytecode, enabling Java analysis tools to work with Android apps.
ESLint plugin that enforces immutable JavaScript by prohibiting mutation, let/var declarations, and this usage.
A PHP tool to enforce architectural constraints and prevent design violations in your codebase.
A linter and fixer for Nix code that highlights antipatterns and provides automated fixes.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.