Maven
openrewrite/rewrite-static-analysis
OpenRewrite recipes for identifying and fixing static analysis issues.
Custom licenseJul 25, 2026 · metrics 2.10.0
All tags
Catalogue tag
#static-code-analysis
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
60 records
Packagist
phpstan/phpstan-deprecation-rules
PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.
MITAug 27, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-nette
Nette Framework class reflection extension for PHPStan & framework-specific rules
MITJul 22, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-webmozart-assert
PHPStan extension for webmozart/assert
MITAug 22, 2026 · metrics 2.10.0
npm
abaplint/abaplint
Standalone static analysis for ABAP
MITAug 22, 2026 · metrics 2.10.0
RubyGems
rubocop/rubocop-performance
An extension of RuboCop focused on code performance checks.
MITJul 16, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-beberlei-assert
PHPStan extension for beberlei/assert
MITAug 22, 2026 · metrics 2.10.0
Packagist
yamadashy/phpstan-friendly-formatter
🤝 A friendly error formatter extension for PHPStan that provides more readable and informative output, including code snippets and color highlighting.
MITJul 22, 2026 · metrics 2.10.0
PyPI
PyCQA/flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
glebm/i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
MITJul 20, 2026 · metrics 2.10.0
crates.io · npm · PyPI
tach-org/tach
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
MITJul 21, 2026 · metrics 2.10.0
crates.io · Packagist
denzyldick/phanalist
Performant static analyzer for PHP, which is extremely easy to use. It helps you catch common mistakes in your PHP code.
MITJul 17, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-mockery
PHPStan extension for Mockery
MITAug 22, 2026 · metrics 2.10.0
PyPI
roskakori/pygount
count lines of code for hundreds of languages using pygments
BSD-3-ClauseAug 8, 2026 · metrics 2.10.0
Go
alexkohler/prealloc
prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
MITAug 4, 2026 · metrics 2.10.0
PyPI · RubyGems
google/pytype
A static type analyzer for Python code
Custom licenseAug 8, 2026 · metrics 2.10.0
Go
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
skryukov/rubocop-gradual
Gradually improve your code with RuboCop
MITJul 17, 2026 · metrics 2.10.0
Packagist
phpcpd-next/phpcpd
phpcpd-next is a token-based copy/paste (clone) detector for PHP 8.5+, a modernized, openly-licensed successor to Sebastian Bergmann's phpcpd
BSD-3-ClauseAug 18, 2026 · metrics 2.10.0
Go
alexkohler/nakedret
nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
utkarsh2102/rubocop-packaging
A RuboCop extension focused on enforcing upstream best practices and coding conventions.
MITJul 17, 2026 · metrics 2.10.0
—
realvizu/NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
GPL-2.0Jul 18, 2026 · metrics 2.10.0
—
policeman-tools/forbidden-apis
Policeman's Forbidden API Checker
Apache-2.0Aug 21, 2026 · metrics 2.10.0
RubyGems
koic/rubocop-faker
A RuboCop extension for Faker.
MITJul 20, 2026 · metrics 2.10.0
Maven
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm
standard/eslint-config-standard
ESLint Config for JavaScript Standard Style
MITAug 13, 2026 · metrics 2.10.0
NuGet
security-code-scan/security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
LGPL-3.0Aug 27, 2026 · metrics 2.10.0
PyPI
tylerwince/flake8-bandit
Automated security testing using bandit and flake8.
MITJul 28, 2026 · metrics 2.10.0
npm · Maven
SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
Custom licenseJul 16, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
MITAug 2, 2026 · metrics 2.10.0