#static-analysis

PHP_Codesniffer ruleset (sniffs) for the WPGraphQL plugin ecosystem

Custom sniffs for PHP_CodeSniffer

External ruleset for PHP CodeSniffer intended for use by sniff developers

nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.

AI-powered code convention checker for CI. Enforce your team's conventions from a plain-language YAML file — vendor-neutral, language-agnostic Go CLI.

Deterministic cross-repo contract analysis for AI agents: which frontend calls hit which backend endpoints (and which don't) — exact joins, disclosed blind spots, no guessing. TypeScript/JavaScript, Python, Java, C#, Rust, Go, Prisma, SQL natively; anything else via a documented adapter envelope. Rust core, zero network.

Analyzes php-code for side-effects.

El repositorio no publica descripción.

El repositorio no publica descripción.

CLI that audits MCP (Model Context Protocol) server implementations for spec conformance and quality — missing descriptions, undocumented params, unhandled errors, README coverage.

Generate OpenAPI v3 specs from Go source code via static analysis — no magic comments, no annotations, no codegen. Framework-agnostic (chi, gin, echo), with a fluent metadata API for overrides.

SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.

The quality ratchet for TS/JS: 9 zero-config gates against a versioned baseline — quality can only improve, never regress.

repomap: token-budgeted repo map for AI coding agents. Walks any repo, ranks files by import refs, emits orientation in under 4000 tokens. Stdlib-only Go, zero deps, tree/JSON/HTML. go install github.com/AkashPriyadarshii/repomap/cmd/repomap@latest

An Elixir tool for checking safety of database migrations.

rpcguard checks if connect-RPC endpoint method is implemented properly

El repositorio no publica descripción.

hewd is a lightweight Go‑based command‑line tool for initializing, scanning, and diagnosing documentation assets in codebases. It helps developers automatically detect project structure, validate documentation, and output insights in human‑ or machine‑readable formats.

mixingcheck is a static analyzer to check forbidden structs and method calls.

Local, deterministic code intelligence for developers and AI coding assistants — cited answers about symbols, callers, references, routes, and change impact, without dumping your repo into a context window.

A line length analyzer for Go.

Shared QA toolchain for php-db components: Mago formatting, linting and static analysis, plus the PHPUnit baseline and CI workflow.

A TypeScript-native DSL for expressing architectural intent as typed declarations. Produces renderable docs/diagrams and a queryable knowledge graph, supporting type-checked snippet references, semantic relations, and constraints.