Go
go-simpler/sloglint
🪵 Ensure consistent code style when using log/slog
MPL-2.0Oct 21, 2026 · metrics 2.10.0
All tags
Catalogue tag
#static-analysis
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
503 records
Packagist
hihaho/rector-rules
No repository description published.
MITSep 15, 2026 · metrics 2.10.0
Packagist
php-stubs/generator
Generate stubs from any PHP code for IDE completion and static analysis.
MITSep 15, 2026 · metrics 2.10.0
Packagist
shipmonk-rnd/coverage-guard
🧪 Enforce PHP code coverage in your CI. Not by percentage, but target core methods! Allows you to start enforcing coverage for new code only! Also contains tooling to merge and convert PHPUnit coverage files.
MITSep 9, 2026 · metrics 2.10.0
Go
skilltrust/skill-detector
CLI to spot risky AI skill packages before you use them. Scans for injection, exfiltration, supply chain, and other threats.
MITOct 19, 2026 · metrics 2.10.0
npm
state-adapt/state-adapt
Declarative, incremental state management library
MITOct 19, 2026 · metrics 2.10.0
Packagist
szepeviktor/phpstan-wordpress
WordPress extensions for PHPStan ⛏️
MITSep 14, 2026 · metrics 2.10.0
crates.io
xnacly/sqleibniz
Static analysis and LSP for SQL in Rust
MITOct 19, 2026 · metrics 2.10.0
—
ANcpLua/ANcpLua.Analyzers
Roslyn analyzers enforcing code quality, AOT safety, and best practices for C#. Auto-injected via ANcpLua.NET.Sdk.
MITOct 13, 2026 · metrics 2.10.0
crates.io
ATRAPSLLC/analyssa
Target-agnostic SSA IR, analyses, and optimization pipeline
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
Dominik-O22/dry-ts
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
Go
RoninForge/hanko
Validate Claude Code plugin manifests before submission. Go CLI + GitHub Action that catches reserved marketplace names, duplicate hooks declarations, path traversal, and schema errors the official validator reports opaquely. roninforge.org/hanko
MITOct 19, 2026 · metrics 2.10.0
npm
calllint/calllint
Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent runs them.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
codeigniter4/devkit
Development toolkit for CodeIgniter libraries and projects
MITSep 13, 2026 · metrics 2.10.0
Go
git-pkgs/sarif
Go library for reading, writing, and validating SARIF 2.1.0 logs
MITSep 8, 2026 · metrics 2.10.0
Go
jordonpeterson/codeowners-tool
Programmatic CODEOWNERS edits
MITSep 19, 2026 · metrics 2.10.0
PyPI · crates.io · npm
kent-tokyo/elixcee
Run, test, and diagnose Excel VBA macros without Microsoft Excel. elixcee is a Rust-powered headless VBA runtime for Linux, macOS, and Windows, with static analysis, property-based workbook testing, and root-cause diagnostics for common Excel operation failures.
MITOct 19, 2026 · metrics 2.10.0
Packagist
patchlevel/event-sourcing-phpstan-extension
phpstan extension for event-sourcing library.
MITSep 8, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-dibi
Dibi class reflection extension for PHPStan
MITOct 1, 2026 · metrics 2.10.0
Go
preminger/goctx
Command-line Go utility that automatically adds missing "plumbing" for `context.Context` parameters along the call-graph leading to a given function.
Custom licenseSep 10, 2026 · metrics 2.10.0
npm
putervision/spc
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, and LLM model security auditing.
MITSep 18, 2026 · metrics 2.10.0
Packagist
redaxo/php-cs-fixer-config
php-cs-fixer config for REDAXO
MITOct 6, 2026 · metrics 2.10.0
PyPI
saullocastro/panels
Semi-analytical modeling of plates, shells, stiffened panels, single or multi-domain
BSD-3-ClauseOct 7, 2026 · metrics 2.10.0
npm
yuvrajangadsingh/vibecheck
ESLint for AI slop. Detect AI-generated code smells in your JS/TS and Python codebase.
Custom licenseOct 9, 2026 · metrics 2.10.0
npm
zakariagharzouli/sparda
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
Custom licenseSep 8, 2026 · metrics 2.10.0
Packagist
CodeIgniter/coding-standard
Official Coding Standards for CodeIgniter
MITSep 12, 2026 · metrics 2.10.0
Go · npm
LarsArtmann/md-go-validator
Validate code blocks in Markdown and MDX documentation. Multi-language (Go, TypeScript, Rust, Nix, HCL, Templ), pure Go, CI-friendly.
MITSep 11, 2026 · metrics 2.10.0
Go
OpticDiff/code-reviewer
Fast, local-first AI code review CLI & pre-push hook for GitHub PRs and GitLab MRs. Multi-model consensus, Tree-sitter context, SARIF, and zero lock-in.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
PHPCSStandards/PHPCSDevTools
Tools for PHP_CodeSniffer sniff developers
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
PHPCompatibility/PHPCompatibilityPasswordCompat
PHPCompatibility ruleset which can be included in projects using @ircmaxell's PasswordCompat polyfill library
LGPL-3.0Sep 12, 2026 · metrics 2.10.0