#static-analysis

checkstyle/checkstyle

Java

90

health

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Cranot/roam-code

Python

89

health

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 238 commands, 224 MCP tools, change-safety gates, audit evidence, zero API keys.

bridgecrewio/checkov

Python

89

health

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

PHP-CS-Fixer/PHP-CS-Fixer

PHP

89

health

A tool to automatically fix PHP Coding Standards issues

fallow-rs/fallow

Rust

88

health

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

betterleaks/betterleaks

Go

88

health

Scan the world (for secrets)

nikic/PHP-Parser

PHP

88

health

A PHP parser written in PHP

realm/SwiftLint

Swift

88

health

A tool to enforce Swift style and conventions.

detekt/detekt

Kotlin

88

health

Static code analysis for Kotlin

elixir-vibe/reach

Elixir

88

health

Program dependence graph and architecture/code-flow analysis for BEAM projects

phpstan/phpstan

PHP

87

health

PHP Static Analysis Tool - discover bugs in your code without running it!

troessner/reek

Ruby

83

health

Code smell detector for Ruby

rrrene/credo

Elixir

80

health

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.