Sign in with GitHub

TOPIC

#static-analysis

Open source repositories tagged with #static-analysis, ranked by health score.

checkstyle/checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

SonarSource/sonarqube

Continuous Inspection

horsicq/Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

enola-labs/enola

Architecture intelligence for developers, coding agents, and CI - understand codebases, analyze change impact, and catch architectural regressions.

1broseidon/cymbal

Language-agnostic code navigation CLI powered by tree-sitter

duriantaco/skylos

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

repowise-dev/repowise

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

fallow-rs/fallow

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

ast-grep/ast-grep

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

zizmorcore/zizmor

Static analysis for GitHub Actions

Analyze ELF binaries like a boss 😼🕵️‍♂️

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

Roave/BackwardCompatibilityCheck

:ab: Tool to compare two revisions of a class API to check for BC breaks

PHP-CS-Fixer/PHP-CS-Fixer

A tool to automatically fix PHP Coding Standards issues

realm/SwiftLint

A tool to enforce Swift style and conventions.

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

elixir-vibe/reach

Program dependence graph and architecture/code-flow analysis for BEAM projects

Code smell detector for Ruby

google/error-prone

Catch common Java mistakes as compile-time errors