#static-analysis

ESLint plugin with rules for linting tsconfig.json configuration files

:ab: Tool to compare two revisions of a class API to check for BC breaks

Find leaking classes that you never use... and get rid of them.

A secure JavaScript sandbox designed for safe AI agent code execution. Protects against code injection, prototype pollution, and sandbox escapes. The security layer that makes AI-generated code safe to run.

See the invisible structure of your code. Multi-language code quality and architecture analyzer (Go, PHP, Python, Rust...)

measure dependency waste and attack surface before it ships

✔️ PHP Architecture Tester - Easy architecture testing for PHP

AI-powered quality gate for CI: 121 modules, self-healing fixes, one verified PR. CLI, GitHub Action, MCP server, WordPress.

Static analysis and state mutation auditor specifically designed for FrankenPHP's Worker Mode.

Multi-agent orchestration, persistent memory, and intelligent workflows for AI coding assistants. Supports Claude Code, OpenCode and Codex.

Continuously refine your project’s engineering philosophy — and keep AI coding agents honest with evidence-backed completion.

Code quality analyzers for AI agents — dead code, clones, complexity, dependencies.

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

PHPStan based SQL static analysis and type inference for the database access layer

Blinter is a linter for Windows batch files. It provides comprehensive static analysis to identify syntax errors, security vulnerabilities, performance issues and style problems.

🤝 A friendly error formatter extension for PHPStan that provides more readable and informative output, including code snippets and color highlighting.