#static-analysis

Code style checking for RSpec files.

A tool to automatically fix PHP Coding Standards issues

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

A vulnerability scanner for container images and filesystems

A high-performance static analysis toolkit for Ruby

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

A tool to automatically fix PHP Coding Standards issues

Regal is a linter and language server for Rego, bringing your policy development experience to the next level!

PHP Static Analysis Tool - discover bugs in your code without running it!

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

Go security checker

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

Code style checking for Capybara files.

An extremely fast Python linter and code formatter, written in Rust.

Keep your architecture clean.

Go security checker

foundation modules for scanning container packages and reporting vulnerabilities

Go security checker

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

Scans your project to determine what components you use

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

Next-gen phpDoc parser with support for intersection types and generics