All tags
Catalogue tag

#static-analysis

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

192 records
Tagged “static-analysis”Ranked by health index
PyPI
91Excellenthealth index
pylint-dev/pylint
It's not just a linter that annoys you!
Python★ 5,702Jul 17, 2026
GPL-2.0Jul 17, 2026 · metrics 1.13.0
Go
85Excellenthealth index
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Go★ 9,262Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
85Excellenthealth index
pylint-dev/astroid
A common base representation of python source code for pylint and other projects
Python★ 581Jul 17, 2026
LGPL-2.1Jul 17, 2026 · metrics 1.13.0
RubyGems
84Goodhealth index
rubocop/rubocop-rspec
Code style checking for RSpec files.
Ruby★ 857Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Packagist
83Goodhealth index
PHP-CS-Fixer/PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
PHP★ 13.5K↓ 5.5M/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Maven
83Goodhealth index
SonarSource/sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Java★ 1,210Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
83Goodhealth index
anchore/grype
A vulnerability scanner for container images and filesystems
Go★ 12.6KJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
RubyGems · crates.io
82Goodhealth index
Shopify/rubydex
A high-performance static analysis toolkit for Ruby
Rust · Ruby★ 281Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
82Goodhealth index
sverweij/dependency-cruiser
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
JavaScript★ 6,944↓ 10.5M/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
82Goodhealth index
vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
PHP★ 5,867↓ 1.5M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Packagist
81Goodhealth index
FriendsOfPHP/PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
PHP★ 13.5KJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go · npm
81Goodhealth index
open-policy-agent/regal
Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
Go · Open Policy Agent★ 395Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm · Packagist
81Goodhealth index
phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
PHP★ 14K↓ 9.8M/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
crates.io
80Goodhealth index
codeclimate/codeclimate
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Rust★ 3,095Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
Maven
80Goodhealth index
inria/spoon
Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.
Java★ 1,945Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
80Goodhealth index
securego/gosec
Go security checker
Go★ 8,893Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · PyPI · crates.io
79Goodhealth index
ast-grep/ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Rust★ 15.1K↓ 5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
79Goodhealth index
phan/phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
PHP★ 5,620↓ 204.4K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
79Goodhealth index
rubocop/rubocop-capybara
Code style checking for Capybara files.
Ruby★ 61Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI · crates.io · npm
78Goodhealth index
astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
Rust★ 48.6KJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Packagist
78Goodhealth index
deptrac/deptrac
Keep your architecture clean.
PHP★ 2,977↓ 919.3K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
78Goodhealth index
goastscanner/gas
Go security checker
Go★ 8,893Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
78Goodhealth index
quay/claircore
foundation modules for scanning container packages and reporting vulnerabilities
Go★ 152Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
78Goodhealth index
securego/gas
Go security checker
Go★ 8,893Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
PyPI
78Goodhealth index
semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
OCaml · Python★ 16K↓ 14/moJul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
Packagist · crates.io · npm
77Goodhealth index
carthage-software/mago
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Rust · PHP★ 3,314↓ 235.2K/moJul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
—
77Goodhealth index
microsoft/component-detection
Scans your project to determine what components you use
C#★ 545Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io
77Goodhealth index
qltysh/qlty
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Rust★ 3,098↓ 123/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
crates.io · npm
76Goodhealth index
fallow-rs/fallow
Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.
Rust★ 4,122Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
76Goodhealth index
phpstan/phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
PHP★ 1,528↓ 10.7M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0