#code-quality

Deterministic standards for Python, TypeScript, SQL, IaC, and repository policy.

♾️ Umbrella php package and unified CLI for the governed agentic-coding loop: board (kanban), learning, and recall-compiler.

Deterministic Stop-gate and code-graph context for AI coding agents: blocks only net-new findings and gives the loop a structural map of the codebase, locally, with no model in the gate.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.

devr's codeguard tool for ci, testing and deployment

Find and fix what the MCP 2026-07-28 spec revision breaks in your server. 21 rules, 19 of them with fixers, and a readiness board.

Prevent memory leaks and runtime crashes in .NET Dependency Injection. A zero-overhead Roslyn analyzer that catches captive dependencies, undisposed scopes, and lifetime mismatches at compile-time.

Track and analyze binary size and memory footprint in embedded firmware

Anti-hallucination AI agent kit for Cursor, Windsurf & Antigravity. 27 specialist agents, 17 slash commands, 8 Tribunal reviewers. Install: npx tribunal-kit init

ShieldCI Analyzers Core - Shared foundation for building static analysis tools. Includes abstract analyzer classes, result formatters, file parsers, and utilities. Used by both shieldci/laravel and shieldci/laravel-pro packages.

The quality tools of the zairakai PHP projects, without Laravel: Pint, PHPStan, Rector, PHP Insights, markdownlint and the Git hooks, as a base that a project extends.

An ESLint multipurpose config collection.

Embedding-based code duplication detector

DX-first ESLint 10 flat config for JavaScript and TypeScript, with auto-detection and opt-in framework packages.

Zero-tolerance ESLint plugin and config for enforcing strict code quality standards.

Evidence-based audit methodology and read-only Laravel context tools for existing AI coding agents.

PHP static analysis for architecture & maintainability — 60+ metrics, complexity analysis, dependency graphs, git churn hotspots, and AI-ready MCP server. Alternative to PHPMetrics.

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

Opinionated PHP code-quality analyzer that scores findings across quality pillars and emits reports for terminals, CI, SARIF, HTML, and a local dashboard.

An opinionated static analyzer for TypeScript and JavaScript projects - 119 rules across 11 pillars, baselines, SARIF/HTML/Markdown reports, CI annotations, and a local dashboard.

A tool to verify that your files are in harmony with your .editorconfig

A Roslyn analyser for AutoMapper that catches missing and misconfigured mappings at compile time.

Generate JSDoc from the AST, validate it in CI, and publish a static documentation site — no AI, no network calls, no runtime surprises.

the cli

✅ Run actionlint in your GitHub workflow

Claude Code skills for git workflows, GitHub automation, security audits, code refactoring, and project tooling

Fast architecture smell detector for TypeScript/JavaScript

code complexity metrics visualization and exploration tool for ruby and javascript

PHPStan rules that help you migrate from PHP-FPM to FrankenPHP classic, then to worker mode. Rules are split by level with demos for every case.

Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find out in under a second.