#static-analysis

Next-gen phpDoc parser with support for intersection types and generics

Doctrine extensions for PHPStan

PHPUnit extensions and rules for PHPStan

Code style checking for factory_bot files.

Code style checking for Rails-related RSpec files.

Signatures for entire Python programs. Extract the structure, the frame, the skeleton of your project, to generate API documentation or find breaking changes in your API.

Laravel static analysis with built-in security scanning

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

PHP Compatibility check for PHP_CodeSniffer

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?

PHPStan rules to detect disallowed method & function calls, constant, namespace, attribute, keyword & superglobal usages, with powerful rules to re-allow a call or a usage in places where it should be allowed.

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 238 commands, 224 MCP tools, change-safety gates, audit evidence, zero API keys.

Nette Framework class reflection extension for PHPStan & framework-specific rules

Extra strict and opinionated rules for PHPStan

An analysis tool for Python that blurs the line between testing and type systems.

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

Awesome autocompletion, static analysis and refactoring library for python

Docker image that provides static analysis tools for PHP

Making linters play nice... Mostly.

CI-Friendly static linter with autofix, SAST, semantic analysis for GitHub Actions

Code smell detector for Ruby

A Ruby code quality reporter

Linting rules for Alley Interactive

A high-performance multi-language bindings generator for Rust, up to 1,000x faster than UniFFI. Ship Rust libraries that feels native to Python, Swift, Kotlin, and more

PHPStan extension for webmozart/assert