#static-analysis

该仓库未发布描述。

local-first security analysis for TypeScript & JavaScript

该仓库未发布描述。

Report certain i18n/l10n anti-patterns in your Go codebase

intrange is a program for checking for loops that could use the Go 1.22 integer range feature.

Local static analysis and evidence generation for deployed AI model artifacts

Know what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.

Type-aware linter for unused i18n keys, powered by the TypeScript compiler API

A structural linter that enforces layers, module roles, and function shape in Python.

Local-first semantic governance for AI agents: contracts, impact, drift, evidence, and verified execution. Codex is the first native integration.

基于 Go AST 和类型信息，分析 Git revisions 间直接及间接受影响的 package。Find directly and transitively affected Go packages between Git revisions.

WordPress core test suite function and class declaration stubs for static analysis by PHPStan

Diagnose and fix performance, correctness, and architecture issues in your Svelte codebase

Policeman's Forbidden API Checker

PHP Magic Number Detector

AI Coding Gatekeeper — Zero-config, real-time guardrails for AI-generated code. 零配置AI编码守门员，实时拦截架构/安全/回归问题。

Security scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.

Collection of all the PHPCS rulesets offered by the PHPCompatibility organisation.

Milpa Resolver — resolve the architecture before booting it: contracts, capabilities, surfaces and host profiles into a learnable ResolutionReport. Apache-2.0.

Static dimensional analysis for PHPStan on native PHP numbers, backed by exact rational unit conversion

A fast, type-aware TypeScript 7 linter — drop-in compatible with typescript-eslint

Static analysis for flaky Go tests — catches flaky-test patterns before they flake in CI

Coding standad ruleset used by ShipMonk

FIG PSR3 PHPStan rules

Analyzer: checks whether HTTP response body is closed and a re-use of TCP connection is not blocked.

no! more! slop!

PHPStan extensions and rules for Silverstripe CMS.

⚡ The AI Slop Index linter inspired by @karpathy. Detects hallucinated imports, any-type abuse, vibe coding, and soul-less patterns in TypeScript/JavaScript/React. Fast (~4s), educational, CI-ready. npx karpeslop@latest

Get error count for each PHPStan level

Error-handling lint for Go, Python, Java, JS/TS, Svelte: every failure must report, propagate, or explain itself. Agent hook + pre-commit + CI.