Static Analysis
Showing 36 of 865 projects
A PHPStan extension for verifying architectural rules in PHP code using natural language definitions.
A Visual Studio Code extension for linting and style checking Markdown files with a comprehensive rule set.
A static code analyzer for JavaScript, TypeScript, and CSS that detects quality and security issues.
FlowDroid Static Data Flow Tracker
AI-powered code review tool that diagnoses six architectural decay risks using insights from ten classic software engineering books.
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
A PHP reflection API that improves upon the native one with features like reflecting on unloaded classes and extracting ASTs.
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
An efficient Android vulnerability scanner that finds security issues and missing best practices in APK files.
An ESLint plugin providing linting rules to enforce consistent and valid JSDoc comments in JavaScript and TypeScript code.
An ESLint plugin that validates GraphQL query strings against a schema for Apollo, Relay, Lokka, and FraQL clients.
An ESLint plugin that validates GraphQL query strings against a schema in JavaScript and .graphql files.
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
A configurable linter and analyzer for Makefiles that scans for potential issues and enforces best practices.
Run Python linters and formatters like ruff, black, and mypy directly on Jupyter Notebooks.
A Ruby gem that detects inconsistencies between ActiveRecord models and database schema to prevent data issues.
An ESLint plugin that enforces best practices and catches common errors in Jest test suites.
An open dataset and toolkit for training static PE malware machine learning models, featuring millions of labeled Windows executable samples.
An open dataset and toolkit for training static PE malware machine learning models, featuring extracted features from millions of Windows executable files.
A Roslyn analyzer for C# that enforces good practices in design, usage, security, performance, and style.
Interactive Delphi Reconstructor (IDR) is a decompiler for Delphi-compiled Windows executables and DLLs, focusing on static analysis.
A Roslyn-based analyzer library for C# and VB that provides refactorings, code analysis, and diagnostics.
A pluggable type-checking framework for Java that detects and prevents bugs through custom type qualifiers.
A static analyzer for PE executables that identifies malicious indicators and aids in malware assessment.
A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
A Roslyn tool that generates C# syntax tree API calls from C# source code.
A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.
A Clojure linter that uses tools.analyzer for accurate bug detection, focusing on CI environments.
ESLint plugin providing linting rules for Flow type annotations in JavaScript code.
A static analysis tool to identify security misconfigurations and anti-patterns in Electron applications.
A collection of remark plugins to lint and enforce consistent Markdown code style.
An opinionated linter for Dockerfiles that enforces best practices and catches common mistakes.
A CLI tool that detects soft dependencies in PHP projects by checking for symbols not declared in composer.json.
A security linting framework with IDE plugins and CLI tools that identifies vulnerabilities as developers write code.
A security linting framework with IDE plugins and CLI tools that detects vulnerabilities as developers write code.
A Python framework for disassembly, static analysis, symbolic execution, and debugging of binaries and malware.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.