npm
eslint/eslint
Find and fix problems in your JavaScript code.
MITSep 18, 2026 · metrics 2.10.0
All tags
Catalogue tag
#static-code-analysis
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
67 records
PyPI · crates.io · npm
astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm
biomejs/biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
pylint-dev/pylint
It's not just a linter that annoys you!
GPL-2.0Sep 22, 2026 · metrics 2.10.0
PyPI
semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
LGPL-2.1Sep 16, 2026 · metrics 2.10.0
RubyGems
rubocop/rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
MITOct 18, 2026 · metrics 2.10.0
Packagist
PHP-CS-Fixer/PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
MITAug 27, 2026 · metrics 2.10.0
Maven
SonarSource/sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Custom licenseSep 9, 2026 · metrics 2.10.0
Maven · npm · RubyGems
pmd/pmd
An extensible multilanguage static code analyzer.
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
pylint-dev/astroid
A common base representation of python source code for pylint and other projects
LGPL-2.1Sep 9, 2026 · metrics 2.10.0
Go
mgechev/revive
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
MITAug 28, 2026 · metrics 2.10.0
Go
securego/gosec
Go security checker
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
soot-oss/SootUp
A new version of Soot with a completely overhauled architecture
LGPL-2.1Sep 13, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
SonarSource/sonar-dotnet
Code analyzer for C# and VB.NET projects
Custom licenseSep 15, 2026 · metrics 2.10.0
Packagist
phan/phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven · PyPI
spotbugs/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
Packagist
phpstan/phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
MITOct 20, 2026 · metrics 2.10.0
Packagist · npm
phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
MITOct 20, 2026 · metrics 2.10.0
RubyGems
rubocop/rubocop-rails
A RuboCop extension focused on enforcing Rails best practices and coding conventions.
MITSep 12, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-doctrine
Doctrine extensions for PHPStan
MITAug 27, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-symfony
Symfony extension for PHPStan
MITAug 27, 2026 · metrics 2.10.0
PyPI
prospector-dev/prospector
Inspects Python source files and provides information about type and location of classes, methods etc
GPL-2.0Sep 15, 2026 · metrics 2.10.0
crates.io · npm · PyPI
dekobon/big-code-analysis
Tool to report source code metrics
MPL-2.0Oct 21, 2026 · metrics 2.10.0
npm
flowr-analysis/flowr
Sophisticated static program analysis framework for the R programming language.
GPL-3.0Sep 10, 2026 · metrics 2.10.0
npm · Maven
jenkinsci/analysis-model
A library to read static analysis reports into a Java object model
MITOct 18, 2026 · metrics 2.10.0
Maven
uber/NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
MITAug 28, 2026 · metrics 2.10.0
Maven · PyPI
wala/WALA
T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.
EPL-2.0Sep 10, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-phpunit
PHPUnit extensions and rules for PHPStan
MITAug 27, 2026 · metrics 2.10.0