GitHub topics: static-code-analysis
vegardit/depcheck-maven-plugin
Maven plugin to check for used unused direct and used indirect (transitive) dependencies.
Language: Java - Size: 1.78 MB - Last synced at: about 2 hours ago - Pushed at: about 4 hours ago - Stars: 4 - Forks: 0

coderaiser/putout
🐊 Pluggable and configurable JavaScript Linter, code transformer and formatter, drop-in ESLint superpower replacement 💪 with built-in support for js, jsx, typescript, markdown, yaml and json. Write declarative codemods in a simplest possible way 😏
Language: JavaScript - Size: 19.9 MB - Last synced at: about 1 hour ago - Pushed at: 3 days ago - Stars: 757 - Forks: 43

jborgers/sonar-pmd
☕️ PMD Plugin for SonarQube
Language: Java - Size: 4.89 MB - Last synced at: about 17 hours ago - Pushed at: about 17 hours ago - Stars: 275 - Forks: 162

standard/standard-www
:point_up_2: Website for JavaScript Standard Style (@standard)
Language: CSS - Size: 1.67 MB - Last synced at: about 17 hours ago - Pushed at: about 20 hours ago - Stars: 31 - Forks: 15

phan/phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Language: PHP - Size: 42.7 MB - Last synced at: about 8 hours ago - Pushed at: about 22 hours ago - Stars: 5,572 - Forks: 370

facebook/infer
A static analyzer for Java, C, C++, and Objective-C
Language: OCaml - Size: 191 MB - Last synced at: about 22 hours ago - Pushed at: 7 days ago - Stars: 15,277 - Forks: 2,037

ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
Language: Go - Size: 247 KB - Last synced at: about 22 hours ago - Pushed at: 1 day ago - Stars: 30 - Forks: 2

Ali5tan/bandit
Solutions and walkthroughs for OverTheWire: Bandit - learn Linux command-line basics through real hacking challenges.
Language: Shell - Size: 6.84 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

soot-oss/SootUp
A new version of Soot with a completely overhauled architecture
Language: Java - Size: 309 MB - Last synced at: about 24 hours ago - Pushed at: 4 days ago - Stars: 703 - Forks: 92

Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Language: Go - Size: 23.9 MB - Last synced at: about 24 hours ago - Pushed at: 22 days ago - Stars: 2,336 - Forks: 127

glayzzle/php-parser
:herb: NodeJS PHP Parser - extract AST or tokens
Language: JavaScript - Size: 29.6 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 547 - Forks: 73

sartcod/ruff
An extremely fast Python linter and code formatter, written in Rust.
Size: 19.5 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

ahauschulte/jspecify-with-nullaway
Demonstrates the combined use of JSpecify and NullAway
Language: Java - Size: 40 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1 - Forks: 0

glebm/i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
Language: Ruby - Size: 2.87 MB - Last synced at: about 3 hours ago - Pushed at: 13 days ago - Stars: 2,122 - Forks: 272

reviewdog/reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Language: Go - Size: 5.14 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 8,526 - Forks: 452

SonarSource/sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Language: Java - Size: 67.3 MB - Last synced at: about 15 hours ago - Pushed at: about 17 hours ago - Stars: 1,168 - Forks: 698

SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
Language: TypeScript - Size: 82.4 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1,121 - Forks: 186

biomejs/biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
Language: Rust - Size: 211 MB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 20,020 - Forks: 633

PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
Language: Python - Size: 5.64 MB - Last synced at: 1 day ago - Pushed at: 5 days ago - Stars: 7,152 - Forks: 667

standard/eslint-config-standard
ESLint Config for JavaScript Standard Style
Language: TypeScript - Size: 700 KB - Last synced at: about 3 hours ago - Pushed at: about 6 hours ago - Stars: 2,645 - Forks: 559

semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Language: OCaml - Size: 86.2 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 12,012 - Forks: 731

openrewrite/rewrite-static-analysis
OpenRewrite recipes for identifying and fixing static analysis issues.
Language: Java - Size: 3.89 MB - Last synced at: 1 day ago - Pushed at: 3 days ago - Stars: 40 - Forks: 81

jenkinsci/analysis-model
A library to read static analysis reports into a Java object model
Language: Java - Size: 13.6 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 85 - Forks: 187

eslint/eslint
Find and fix problems in your JavaScript code.
Language: JavaScript - Size: 47.1 MB - Last synced at: 3 days ago - Pushed at: 4 days ago - Stars: 26,087 - Forks: 4,753

SonarSource/sonar-php
:elephant: SonarPHP: PHP static analyzer for SonarQube & SonarLint
Language: Java - Size: 22.2 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 411 - Forks: 107

rubocop/rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
Language: Ruby - Size: 48.1 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 12,752 - Forks: 3,080

pylint-dev/pylint
It's not just a linter that annoys you!
Language: Python - Size: 40.4 MB - Last synced at: 3 days ago - Pushed at: 4 days ago - Stars: 5,506 - Forks: 1,179

jenkinsci/warnings-ng-plugin
Jenkins Warnings Plugin - Next Generation
Language: Java - Size: 27.1 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 346 - Forks: 283

JetBrains/Qodana
📝 Source repository of Qodana Help
Size: 188 MB - Last synced at: about 14 hours ago - Pushed at: about 17 hours ago - Stars: 394 - Forks: 78

spotbugs/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Language: Java - Size: 140 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 3,687 - Forks: 626

SonarSource/sonar-dotnet
Code analyzer for C# and VB.NET projects
Language: C# - Size: 138 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 854 - Forks: 231

twitter/compose-rules
Static checks to aid with a healthy adoption of Compose
Language: Kotlin - Size: 2.33 MB - Last synced at: 2 days ago - Pushed at: over 1 year ago - Stars: 1,384 - Forks: 95

PyCQA/flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
Language: Python - Size: 3.56 MB - Last synced at: 3 days ago - Pushed at: 18 days ago - Stars: 3,640 - Forks: 328

alisqi/TwigQI
TwigQI: Static code analysis for Twig templates
Language: PHP - Size: 411 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 29 - Forks: 2

RalfKoban/MiKo-Analyzers
Provides analyzers that are based on the .NET Compiler Platform.
Language: C# - Size: 14.6 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 13 - Forks: 1

MaibornWolff/codecharta
CodeCharta is a visualization tool that transforms complex software architecture and code metrics into interactive, customizable visual maps, empowering everyone to communicate and analyze your codebase. Improve code quality, maintainability, and architectural decisions
Language: TypeScript - Size: 108 MB - Last synced at: about 14 hours ago - Pushed at: about 15 hours ago - Stars: 313 - Forks: 40

provocon/stratigraph
Stratigraph produces a graph of the mutual usages of source code packages of a software system and derives a layering from this graph. As a result it may check, if the software adheres to a layering pattern.
Language: Java - Size: 117 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 2 - Forks: 0

securego/gosec
Go security checker
Language: Go - Size: 5.17 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 8,337 - Forks: 649

ccoVeille/golangci-lint-config-examples
These are .golangci.yml to go based on your need
Size: 46.9 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 28 - Forks: 1

JohT/code-graph-analysis-pipeline
Fully automated pipeline for static code graph analysis
Language: Jupyter Notebook - Size: 1.96 GB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 20 - Forks: 1

analysis-tools-dev/static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Language: Rust - Size: 41.1 MB - Last synced at: 5 days ago - Pushed at: 2 months ago - Stars: 13,917 - Forks: 1,388

droidefense/engine
Droidefense: Advance Android Malware Analysis Framework
Language: Java - Size: 198 MB - Last synced at: 2 days ago - Pushed at: over 2 years ago - Stars: 483 - Forks: 105

astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
Language: Rust - Size: 78.5 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 40,604 - Forks: 1,421

felipebz/zpa
Parser and static code analysis tool for PL/SQL and Oracle SQL.
Language: Kotlin - Size: 6.64 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 226 - Forks: 79

felipebz/zpa-cli
Command-line interface for the Z PL/SQL Analyzer.
Language: Kotlin - Size: 567 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 26 - Forks: 10

muttistefano/ros2_sonarcloud
ROS2 code quality tool based on sonarcloud
Language: Python - Size: 2.46 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 4 - Forks: 0

tyhal/crie
Universal meta-linter using containerized execution
Language: Go - Size: 1.02 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 8 - Forks: 2

mthuurne/retroasm
RetroAsm: Assembly Toolkit
Language: Python - Size: 3.07 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 4 - Forks: 0

datreeio/datree 📦
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
Language: Go - Size: 8.9 MB - Last synced at: 4 days ago - Pushed at: about 1 year ago - Stars: 6,361 - Forks: 360

simonkowallik/irulescan
:shield: irulescan - security analyzer for iRules
Language: Rust - Size: 327 KB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 7 - Forks: 1

checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Language: Java - Size: 193 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 8,625 - Forks: 3,836

mebigfatguy/fb-contrib
a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
Language: Java - Size: 11.8 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 160 - Forks: 44

phpstan/phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
Language: PHP - Size: 950 KB - Last synced at: 3 days ago - Pushed at: 3 months ago - Stars: 1,456 - Forks: 65

mgechev/revive
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
Language: Go - Size: 6.34 MB - Last synced at: 6 days ago - Pushed at: 17 days ago - Stars: 5,222 - Forks: 297

phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
Language: PHP - Size: 6.14 GB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 13,460 - Forks: 924

wala/WALA
T.J. Watson Libraries for Analysis, with frontends for Java, Android, and JavaScript, and may common static program analyses
Language: Java - Size: 57.6 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 806 - Forks: 237

pmd/pmd
An extensible multilanguage static code analyzer.
Language: Java - Size: 503 MB - Last synced at: 6 days ago - Pushed at: 8 days ago - Stars: 5,143 - Forks: 1,530

realvizu/NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
Language: C# - Size: 16.7 MB - Last synced at: about 24 hours ago - Pushed at: 3 months ago - Stars: 214 - Forks: 32

pylint-dev/astroid
A common base representation of python source code for pylint and other projects
Language: Python - Size: 16.6 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 550 - Forks: 296

phpstan/phpstan-symfony
Symfony extension for PHPStan
Language: PHP - Size: 694 KB - Last synced at: 6 days ago - Pushed at: about 1 month ago - Stars: 746 - Forks: 95

abaplint/abaplint
Standalone static analysis for ABAP
Language: TypeScript - Size: 72.7 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 236 - Forks: 76

goblint/analyzer
Static analysis framework for C
Language: OCaml - Size: 38.5 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 199 - Forks: 81

Correia-jpv/fucking-static-analysis
⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more. With repository stars⭐ and forks🍴
Language: Rust - Size: 40.8 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 22 - Forks: 1

souffle-lang/souffle
Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
Language: C++ - Size: 516 MB - Last synced at: 7 days ago - Pushed at: 25 days ago - Stars: 991 - Forks: 220

cs-au-dk/TIP
Static program analysis for TIP
Language: Scala - Size: 3.33 MB - Last synced at: 4 days ago - Pushed at: 2 months ago - Stars: 293 - Forks: 136

ecpeter23/nyx
Lightweight Rust CLI vulnerability scanner
Language: Rust - Size: 1.59 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 2 - Forks: 0

gauge-sh/tach
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
Language: Rust - Size: 22.9 MB - Last synced at: 9 days ago - Pushed at: 12 days ago - Stars: 2,432 - Forks: 67

eslint/markdown
Lint JavaScript code blocks in Markdown documents
Language: JavaScript - Size: 582 KB - Last synced at: 7 days ago - Pushed at: 9 days ago - Stars: 472 - Forks: 73

pep8speaks-org/pep8speaks
A GitHub :octocat: app to automatically review Python code style over Pull Requests
Language: Python - Size: 4.74 MB - Last synced at: 4 days ago - Pushed at: 9 days ago - Stars: 617 - Forks: 87

deguzman-anna/Checker
Powerful CLI tool for scraping and downloading media from 4chan boards. Ideal for OSINT and research. 🔍📥 Explore threads with ease!
Language: Python - Size: 377 KB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 0 - Forks: 0

nigelhorne/perl-redundancy-scanner
Look for redundant code in your Perl
Language: Perl - Size: 80.1 KB - Last synced at: 9 days ago - Pushed at: 10 days ago - Stars: 0 - Forks: 0

opalj/opal
Language: Scala - Size: 738 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 62 - Forks: 30

slackhq/compose-lints
Lint checks to aid with a healthy adoption of Compose
Language: Kotlin - Size: 4.25 MB - Last synced at: about 18 hours ago - Pushed at: about 21 hours ago - Stars: 439 - Forks: 30

OsmanKandemir/static-code-analysis-helper
Static-Code-Analysis-Helper helps you perform static code analysis.
Language: Python - Size: 1.69 MB - Last synced at: 1 day ago - Pushed at: 10 days ago - Stars: 8 - Forks: 1

kalessil/phpinspectionsea
A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)
Language: Java - Size: 127 MB - Last synced at: 10 days ago - Pushed at: 10 days ago - Stars: 1,464 - Forks: 117

roskakori/pygount
count lines of code for hundreds of languages using pygments
Language: Python - Size: 1.12 MB - Last synced at: 6 days ago - Pushed at: about 2 months ago - Stars: 173 - Forks: 24

vuejs/vue-eslint-parser
The ESLint custom parser for `.vue` files.
Language: TypeScript - Size: 2.2 MB - Last synced at: 6 days ago - Pushed at: 11 days ago - Stars: 476 - Forks: 79

JetBrains/qodana-cli
🔧 JetBrains Qodana’s official command line tool
Language: Go - Size: 3.06 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 199 - Forks: 29

ballerina-platform/sonar-ballerina
This plugin provides an interface to report Ballerina static code analysis results to SonarQube
Language: Java - Size: 156 KB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 2 - Forks: 2

phpstan/phpstan-deprecation-rules
PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.
Language: PHP - Size: 248 KB - Last synced at: 4 days ago - Pushed at: about 2 months ago - Stars: 411 - Forks: 20

phpstan/phpstan-strict-rules
Extra strict and opinionated rules for PHPStan
Language: PHP - Size: 388 KB - Last synced at: 10 days ago - Pushed at: 3 months ago - Stars: 650 - Forks: 51

JohT/code-graph-analysis-examples
Shows how to use the code-graph-analysis-pipeline based on examples
Size: 933 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 0 - Forks: 0

eclipse-pmd/eclipse-pmd Fork of acanda/eclipse-pmd
PMD Plugin for the Eclipse IDE
Language: Java - Size: 17.2 MB - Last synced at: 12 days ago - Pushed at: 12 days ago - Stars: 10 - Forks: 1

JetBrains/qodana-action
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
Language: JavaScript - Size: 19.8 MB - Last synced at: 11 days ago - Pushed at: 12 days ago - Stars: 281 - Forks: 41

qiniu/reviewbot
Empower Your Code Quality with Self-Hosted Automated Analysis and Review
Language: Go - Size: 4.73 MB - Last synced at: 5 days ago - Pushed at: 12 days ago - Stars: 77 - Forks: 21

rubocop/rubocop-rails
A RuboCop extension focused on enforcing Rails best practices and coding conventions.
Language: Ruby - Size: 28.2 MB - Last synced at: 3 days ago - Pushed at: 22 days ago - Stars: 843 - Forks: 280

jeromedalbert/rubocop-obsession
RuboCop extension focused on higher-level concepts, like checking that code reads from top to bottom
Language: Ruby - Size: 122 KB - Last synced at: 5 days ago - Pushed at: 12 days ago - Stars: 136 - Forks: 5

standard/standard
🌟 JavaScript Style Guide, with linter & automatic code fixer
Language: JavaScript - Size: 3.49 MB - Last synced at: 13 days ago - Pushed at: 10 months ago - Stars: 29,330 - Forks: 2,321

ProditorMagnus/WML_tree_tools
Language: Lua - Size: 2.72 MB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 4 - Forks: 0

bolajiwahab/pgrubic
PostgreSQL linter and formatter for schema migrations and design best practices.
Language: Python - Size: 4.81 MB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 6 - Forks: 1

stormsidali2001/ioc-arise
Arise type-safe IoC containers from your code. Zero overhead, zero coupling.
Language: TypeScript - Size: 1.36 MB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 6 - Forks: 0

phpstan/phpstan-doctrine
Doctrine extensions for PHPStan
Language: PHP - Size: 1.18 MB - Last synced at: 3 days ago - Pushed at: about 2 months ago - Stars: 639 - Forks: 106

lu-cs-sde/metadl
MetaDL: Datalog analyzing Datalog, Java or any language of your choice
Language: Java - Size: 27.4 MB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 16 - Forks: 2

designsecurity/progpilot
A static analysis tool for security
Language: PHP - Size: 26.3 MB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 340 - Forks: 62

baikaishuipp/jcci
Java code commit impact, java code change impact analysis,java代码改动影响范围分析工具,精准测试,回归测试范围划定
Language: Python - Size: 1.75 MB - Last synced at: 14 days ago - Pushed at: 7 months ago - Stars: 316 - Forks: 53

jborgers/PMD-jPinpoint-rules
PMD rule set for responsible Java and Kotlin coding: performance, sustainability, multi-threading, data mixup and more.
Language: Java - Size: 2.93 MB - Last synced at: 4 days ago - Pushed at: 15 days ago - Stars: 47 - Forks: 10

TWiStErRob/android-lint-examples
Project that reproduces every lint violation out there. (At least that's the idea, contributions welcome.)
Language: Java - Size: 887 KB - Last synced at: 7 days ago - Pushed at: 15 days ago - Stars: 7 - Forks: 1

miozilla/sast
sast :green_apple::tropical_drink: : Static Application Security Testing # nodejsscan # SCA # OWASP # Juice Shop
Size: 1.97 MB - Last synced at: 16 days ago - Pushed at: 16 days ago - Stars: 0 - Forks: 0

uber/NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Language: Java - Size: 6.75 MB - Last synced at: 16 days ago - Pushed at: 16 days ago - Stars: 3,781 - Forks: 307

rubberduck-vba/Rubberduck
Every programmer needs a rubberduck. COM add-in for the VBA & VB6 IDE (VBE).
Language: C# - Size: 101 MB - Last synced at: 16 days ago - Pushed at: 17 days ago - Stars: 2,020 - Forks: 309
