Search awesome repositories

Interactive architecture diagrams for codebases

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Manage translation and localization with static analysis, for Ruby i18n

Various code metrics for Python code

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

Next-gen phpDoc parser with support for intersection types and generics

AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix

Code quality analysis for Python in the age of AI coding.

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Code style checking for RSpec files.

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

PHP Magic Number Detector

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

Advanced anti-reverse-engineering library made in C++26

The Exakat Engine : smart static analysis for PHP

Linux anti-debugging and anti-analysis rust library

A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the "persistence-refactor" branch, ancient (but stable) work is in "master", so... create an issue if you want/need something backported. Use "Wiki" or "Discussions" for examples, and smash that "Star" button if you like this.

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

Checks syntax of reStructuredText and code blocks nested within it

OPEM (Open Source PEM Fuel Cell Simulation Tool)

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.

An extendable and customisable Zig linter that is integrated from source into your build.zig.

🇺🇦🇵🇱 A static analysis tool for OpenTelemetry Collector configurations. Built on OPA/Rego, it validates your pipelines, receivers, processors, and exporters against customizable policy rules – catching misconfigurations before they reach production

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

A static analyzer and linter for Zig

AI-powered code review tool that analyzes git branch differences and generates comprehensive review reports. Supports AWS Bedrock and Anthropic API. Features automated analysis of logic, security, performance, and code quality with smart token efficiency through prompt caching.