Static Code Analysis
Showing 24 of 60 projects
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
A Roslyn-based static analyzer for C# and VB.NET that detects bugs, vulnerabilities, and code smells to improve code quality and security.
Static code analyzer for C# and VB.NET that detects bugs, vulnerabilities, and code smells to improve code quality and security.
A RuboCop extension that enforces Rails best practices and coding conventions through automated linting.
A RuboCop extension that enforces Rails best practices and coding conventions through automated linting.
A cross-platform static code analysis tool for mobile applications (APK/IPA) to find security vulnerabilities like hardcoded credentials and API keys.
A comprehensive static analysis library for Java bytecode and JavaScript, supporting interprocedural dataflow, pointer analysis, and call graph construction.
A RuboCop extension that adds performance-focused static analysis to detect inefficient Ruby code patterns.
A PHP_CodeSniffer ruleset that detects security vulnerabilities and weaknesses in PHP code, including Drupal 7.
A Go static analysis tool that identifies slice declarations that could be preallocated for better performance.
An ESLint plugin to lint JavaScript, JSX, TypeScript, and other code blocks within Markdown documents.
A Visual Studio extension for real-time .NET secure code analysis that displays vulnerabilities as compiler warnings.
A static race detector for Go that analyzes code without execution to find data races in pointers and concurrency patterns.
A Java bytecode analyzer that detects and blocks forbidden API calls during builds with Ant, Maven, or Gradle.
A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.
A static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
A static analysis tool for Elm that helps find and prevent mistakes through customizable rules.
A Java library for parsing static code analysis reports from 79+ tools into a unified format.
A modern, performant Delphi language analyzer plugin for SonarQube with semantic analysis and custom rule support.
A Go static analysis tool that identifies naked returns in functions exceeding a specified line length.
A GitHub Action that runs PSScriptAnalyzer static code analysis on PowerShell scripts during pull requests.
A lightweight static security analysis tool for modern Perl applications that identifies vulnerabilities using AST analysis and taint tracking.
A platform-independent static analysis tool that performs deep code quality analysis for Java, Python, C#, JavaScript, and C/C++ systems.
A comprehensive ESLint plugin providing custom rules and configurations for JavaScript, TypeScript, Vue.js, and Node.js projects.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.