#code-quality

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

A tool that standardizes and automates Python project setup, configuration, development, and maintenance.

Prevent memory leaks and runtime crashes in .NET Dependency Injection. A zero-overhead Roslyn analyzer that catches captive dependencies, undisposed scopes, and lifetime mismatches at compile-time.

Salesforce DevTools — CLI, VS Code extension, sf plugin, MCP server, and web dashboard for Salesforce DX deploy, test, org health, and release management. AI-optional, CI-ready.

Static analysis for Filament v4/v5 projects. Detect deprecated patterns and code issues.

🚀 AI-powered code review tool for GitHub, GitLab, Bitbucket Cloud, Bitbucket Server, Azure DevOps and Gitea — built with LLMs like OpenAI, Claude, Gemini, Ollama, Bedrock, OpenRouter and Azure OpenAI

Automated code analysis for Laravel applications with 73 comprehensive analyzers covering security, performance, reliability, code quality, and best practices. Works with Laravel 9+.

Declare which parts of a package may import which, and gate it in CI. An import-topology linter: zones, sealed deep modules, guest lists, cycle bans, reach ceilings - judged against the real import graph.

No repository description published.

devr's codeguard tool for ci, testing and deployment

Claude Code skills for git workflows, GitHub automation, security audits, code refactoring, and project tooling

CaptainHook is a very flexible git hook manager for software developers that makes sharing git hooks with your team a breeze.

Cyclomatic and cognitive complexity rules for oxlint with actionable error messages. Also available as a standalone library for programmatic complexity analysis.

A comprehensive, robust MSBuild-based SDK for .NET projects (.NET 5.0+, .NET Standard 2.0/2.1) with optimizations for .NET 10.0.

Simplify code and repo health

Static analysis tool that catches 1000+ bug patterns across all popular programming languages, with auto-wiring into AI coding agent quality guardrails

The dispatch doctor prescribes type stability

AI code review pipeline that turns agent-written PRs into merge-ready patches

Anti-hallucination AI agent kit for Cursor, Windsurf & Antigravity. 27 specialist agents, 17 slash commands, 8 Tribunal reviewers. Install: npx tribunal-kit init

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

Opinionated PHP code-quality analyzer that scores findings across quality pillars and emits reports for terminals, CI, SARIF, HTML, and a local dashboard.

Change Risk Anti-Patterns (CRAP) metric for Rust projects

toaster-ready — a CLI that scores how ready a repo is for agents and humans to ramp up on (binary: toaster).