All tags
Catalogue tag

#static-analysis

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

502 records
Tagged “static-analysis”Ranked by health index
PyPI · npm · Go +1
51Moderatehealth index
nikitatsym/tackbox
Error-handling lint for Go, Python, Java, JS/TS, Svelte: every failure must report, propagate, or explain itself. Agent hook + pre-commit + CI.
Python · JavaScript · Go★ 0↓ 2,274/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Go
51Moderatehealth index
shimabox/diagoram
diagoram is a CLI that statically analyzes Go source and generates Mermaid/PlantUML diagrams, Markdown analysis reports, and an offline HTML portal. No build step, no external dependencies.
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
51Moderatehealth index
sshworld/roster
Does your agent earn its context? Static analyzer for AI agent rosters — overlap, harness gaps, context cost.
TypeScript · Shell★ 1↓ 83/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
staabm/phpstan-baseline-analysis
Analyzes PHPStan baseline files and creates aggregated error trend-reports
PHP★ 84↓ 11.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
50Moderatehealth index
imchintoo/code-multivitals
Code quality metrics engine — cyclomatic complexity, cognitive complexity, Halstead, MI, health score, smells, clones, trends, dashboard
TypeScript★ 3↓ 15.9K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
50Moderatehealth index
spiral/tokenizer
[READ ONLY] Locate available classes by parent, interface or trait. Subtree split of the Spiral Tokenizer component (see spiral/framework)
PHP★ 18↓ 750.1K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
50Moderatehealth index
wikimedia/mediawiki-tools-phan-SecurityCheckPlugin
Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing
PHP★ 27↓ 32.6K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
AxeWP/WPGraphQL-Coding-Standards
PHP_Codesniffer ruleset (sniffs) for the WPGraphQL plugin ecosystem
Mixed★ 11↓ 3,019/moSep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
Moxio/php-codesniffer-sniffs
Custom sniffs for PHP_CodeSniffer
PHP★ 17↓ 3,772/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
PHPCSStandards/PHPCSDevCS
External ruleset for PHP CodeSniffer intended for use by sniff developers
Mixed★ 9↓ 7,496/moSep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Go
48Weakhealth index
alexkohler/nakedret
nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.
Go★ 132Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
48Weakhealth index
chalvinwz/tertib
AI-powered code convention checker for CI. Enforce your team's conventions from a plain-language YAML file — vendor-neutral, language-agnostic Go CLI.
Go★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
eezz4/zzop
Deterministic cross-repo contract analysis for AI agents: which frontend calls hit which backend endpoints (and which don't) — exact joins, disclosed blind spots, no guessing. TypeScript/JavaScript, Python, Java, C#, Rust, Go, Prisma, SQL natively; anything else via a documented adapter envelope. Rust core, zero network.
Rust · HTML★ 2Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
staabm/side-effects-detector
Analyzes php-code for side-effects.
PHP★ 165↓ 11.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
47Weakhealth index
lejouni/coverity_metrics
No repository description published.
Python · HTML★ 1↓ 2,182/moSep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
crates.io · npm
47Weakhealth index
tacticaldoll/tianheng
No repository description published.
Rust★ 0↓ 27.3K/moSep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
47Weakhealth index
vishalhabib99/mcp-doctor
CLI that audits MCP (Model Context Protocol) server implementations for spec conformance and quality — missing descriptions, undocumented params, unhandled errors, README coverage.
Python★ 1Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
45Weakhealth index
Zachacious/go-respec
Generate OpenAPI v3 specs from Go source code via static analysis — no magic comments, no annotations, no codegen. Framework-agnostic (chi, gin, echo), with a fluent metadata API for overrides.
Go★ 11Oct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
Go · PyPI
45Weakhealth index
Zayan-Mohamed/secscan
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
Go · Shell · PowerShell★ 4Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
45Weakhealth index
maclevison/cliquet
The quality ratchet for TS/JS: 9 zero-config gates against a versioned baseline — quality can only improve, never regress.
TypeScript★ 2↓ 652/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
44Weakhealth index
AkashPriyadarshii/repomap
repomap: token-budgeted repo map for AI coding agents. Walks any repo, ranks files by import refs, emits orientation in under 4000 tokens. Stdlib-only Go, zero deps, tree/JSON/HTML. go install github.com/AkashPriyadarshii/repomap/cmd/repomap@latest
Go · HTML★ 0Sep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
Hex
44Weakhealth index
Artur-Sulej/excellent_migrations
An Elixir tool for checking safety of database migrations.
Elixir★ 303↓ 126.9K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
44Weakhealth index
cloverrose/rpcguard
rpcguard checks if connect-RPC endpoint method is implemented properly
Go★ 0Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
npm
44Weakhealth index
criticaldeveloper/critical-gate
No repository description published.
TypeScript★ 1↓ 113/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
44Weakhealth index
jbakchr/hewd
hewd is a lightweight Go‑based command‑line tool for initializing, scanning, and diagnosing documentation assets in codebases. It helps developers automatically detect project structure, validate documentation, and output insights in human‑ or machine‑readable formats.
Go★ 0Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
44Weakhealth index
ormanli/mixingcheck
mixingcheck is a static analyzer to check forbidden structs and method calls.
Go★ 5Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
42Weakhealth index
aziron-ai/atlas
Local, deterministic code intelligence for developers and AI coding assistants — cited answers about symbols, callers, references, routes, and change impact, without dumping your repo into a context window.
JavaScript★ 3Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
42Weakhealth index
lesiw/linelen
A line length analyzer for Go.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
contenir/contenir-qa-tools
Shared QA toolchain for php-db components: Mago formatting, linting and static analysis, plus the PHPUnit baseline and CI workflow.
Mixed★ 0↓ 5,158/moOct 8, 2026
BSD-3-ClauseOct 8, 2026 · metrics 2.10.0
npm
41Weakhealth index
mitk0936/tskb
A TypeScript-native DSL for expressing architectural intent as typed declarations. Produces renderable docs/diagrams and a queryable knowledge graph, supporting type-checked snippet references, semantic relations, and constraints.
TypeScript★ 2↓ 1,100/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0