Static Analysis
Showing 36 of 865 projects
A Visual Studio Code extension for linting and style checking Markdown files with a comprehensive rule set.
A PHPStan extension for verifying architectural rules in PHP code using natural language definitions.
A curated list of awesome flake8 extensions for Python code linting and style enforcement.
A pure Go library for parsing, generating, and analyzing LLVM IR assembly.
FlowDroid Static Data Flow Tracker
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
A tool for static vulnerability analysis and runtime monitoring of Docker images and containers to detect malware and anomalous activities.
A PHP reflection API that improves upon the native one with features like reflecting on unloaded classes and extracting ASTs.
An ESLint plugin providing linting rules to enforce consistent and valid JSDoc comments in JavaScript and TypeScript code.
An efficient Android vulnerability scanner that finds security issues and missing best practices in APK files.
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
A configurable linter and analyzer for Makefiles that scans for potential issues and enforces best practices.
An ESLint plugin that validates GraphQL query strings against a schema in JavaScript and .graphql files.
A Roslyn analyzer for C# that enforces good practices in design, usage, security, performance, and style.
An ESLint plugin that validates GraphQL query strings against a schema for Apollo, Relay, Lokka, and FraQL clients.
Run Python linters and formatters like ruff, black, and mypy directly on Jupyter Notebooks.
A Ruby gem that detects inconsistencies between ActiveRecord models and database schema to prevent data issues.
An ESLint plugin that enforces best practices and catches common errors in Jest test suites.
Interactive Delphi Reconstructor (IDR) is a decompiler for Delphi-compiled Windows executables and DLLs, focusing on static analysis.
An open dataset and toolkit for training static PE malware machine learning models, featuring millions of labeled Windows executable samples.
An open dataset and toolkit for training static PE malware machine learning models, featuring extracted features from millions of Windows executable files.
A static analyzer for PE executables that identifies malicious indicators and aids in malware assessment.
A pluggable type-checking framework for Java that detects and prevents bugs through custom type qualifiers.
A Roslyn-based analyzer library for C# and VB that provides refactorings, code analysis, and diagnostics.
A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.
A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
A Roslyn tool that generates C# syntax tree API calls from C# source code.
A Clojure linter that uses tools.analyzer for accurate bug detection, focusing on CI environments.
ESLint plugin providing linting rules for Flow type annotations in JavaScript code.
A static analysis tool to identify security misconfigurations and anti-patterns in Electron applications.
A collection of remark plugins to lint and enforce consistent Markdown code style.
An opinionated linter for Dockerfiles that enforces best practices and catches common mistakes.
A security linting framework with IDE plugins and CLI tools that identifies vulnerabilities as developers write code.
A security linting framework with IDE plugins and CLI tools that detects vulnerabilities as developers write code.
A CLI tool that detects soft dependencies in PHP projects by checking for symbols not declared in composer.json.
An ESLint plugin to disable mutation and promote functional programming in JavaScript and TypeScript.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.