#code-quality

A PHP code-quality tool

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.

Beautifier for javascript

Security and code-quality ESLint plugins — 477 rules across 30 packages: 272 security rules mapped to CWE + OWASP, 107 quality, 98 React/a11y. ESLint 8.40/9/10 + Oxlint. The lint layer AI-generated code needs.

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.

Persistent memory and receipt-verified workflows for Claude Code — plugin, MCP server, and spec-driven dev framework in one pip install.

ESLint plugin with rules that help validate proper imports.

Composer installer for PHP_CodeSniffer coding standards

Blast-Radius Aware AI Code Review for Business-Critical Systems

Templates and workflow for generating PRDs, Tech Designs, and MVP and more using LLMs for AI IDEs

A plugin for Flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodestyle.

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

The rhiza developer tasks as a pinned CLI: one set of task names across Python, Rust and Go, replacing a synced make layer

ArchUnitTS is an architecture testing library. Specify and ensure architecture rules in your TypeScript app. Easy setup and pipeline integration.

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

A tool that standardizes and automates Python project setup, configuration, development, and maintenance.

Fast Python static analysis powered by Rust. Detects dead code, security issues (including taint analysis), and code quality metrics like complexity, Halstead, maintainability, and nesting depth.

A Functional Library for TypeScript based on Scala

Code intelligence CLI — function-level dependency graph across 34 languages, 34-tool MCP server for AI agents, complexity metrics, architecture boundary enforcement, CI quality gates, git diff impact with co-change analysis, hybrid semantic search. Fully local, zero API keys required.

Shareable ESLint configuration adhering to modern JavaScript, TypeScript, and 2026 code quality standards.

Comprehensive docstring quality vetting for Python projects

🩺⚡ Runtime Doctrine ORM analysis integrated into Symfony Web Profiler. Detect N+1 queries, security vulnerabilities, and performance issues during query execution.

🐰 Bencher - Continuous Benchmarking

A CLI to run all kinds of code quality measurements to align your team with company goals

Plan, build and review software with your coding agents. Work side by side in the App or browser, or use your favourite terminal or IDE.

JS/TS library to easily build valid SARIF output from your javascript based SAST tools

A CLI tool that calculates the CRAP score (cyclomatic complexity x coverage) for Go projects.

Docker image that provides static analysis tools for PHP