#static-analysis

PHPStan rules to detect disallowed method & function calls, constant, namespace, attribute, keyword & superglobal usages, with powerful rules to re-allow a call or a usage in places where it should be allowed.

GitHub action with static analysis for JavaScript tests.

Comprehensive docstring quality vetting for Python projects

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

🩺⚡ Runtime Doctrine ORM analysis integrated into Symfony Web Profiler. Detect N+1 queries, security vulnerabilities, and performance issues during query execution.

A CLI to run all kinds of code quality measurements to align your team with company goals

Tool to generate basic Markdown quality report files from SARIF files

EF Core LINQ performance analyzer and Roslyn analyzer for catching N+1 queries, client-side evaluation, sync-over-async, raw SQL risks, and other query issues at compile time.

Code graph builder for AI code review — parses 14 languages into structural graphs for blast radius, risk scoring, and test gap analysis.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Stop your coding agent reading the wrong files. Compiler-grade TS/JS repo map — 100% precision on blast radius vs grep's 60%, measured on public repos. CLI + MCP server, fully local, no vector DB.

SafeLint enforces safety-critical coding practices inspired by Gerard J. Holzmann’s “Power of Ten” rules, adapted for modern AI-assisted software development.

XSL Linter

The standards-based Web Components multitool. Generate Custom Elements Manifests, Dev Server, LSP, and MCP for your app or design system

🛡️ Configurable PHP architecture guards — define your layers and rules, then keep them enforced

Show unused composer dependencies by scanning your code

Staticcheck - The advanced Go linter

Dockerfile linter, validate inline bash, written in Haskell

Docker image that provides static analysis tools for PHP

Mutation Testing for Ruby

Stop AI coding agents from rediscovering large TypeScript/Node repos with task-aware local context packs.

:bug: A tool that can speed up linting of php files by running several lint processes at once.

Fast Forward Development Tools for PHP projects

Checks syntax of reStructuredText and code blocks nested within it

Spryker Code Sniffer

Code smell detector for Ruby

📐 Bidirectional spec-to-code drift detection. Rust CLI and MCP server that catches undocumented exports and vanished symbols in CI.

ArchUnitPython is an architecture testing library. Specify and ensure architecture rules in your Python app. Easy setup and pipeline integration.

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total). Laravel 9+.