#static-analysis

Error Prone extensions: extra bug checkers and a large battery of Refaster rules.

Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.

Scans your project to determine what components you use

Next-gen phpDoc parser with support for intersection types and generics

Doctrine extensions for PHPStan

Symfony extension for PHPStan

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

Blazingly fast cognitive complexity analysis for Python, written in Rust.

Code style checking for Capybara files.

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Keep your architecture clean.

Fast Markdown linter and formatter written in Rust

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

Tool to report source code metrics

An Intelligent Python Code Quality Analyzer

Signatures for entire Python programs. Extract the structure, the frame, the skeleton of your project, to generate API documentation or find breaking changes in your API.

PHPUnit extensions and rules for PHPStan

Code style checking for factory_bot files.

A Github Action for linting C/C++ code integrating clang-tidy and clang-format to collect feedback provided in the form of file-annotations, thread-comments, workflow step-summary, and Pull Request reviews.

A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable code.

Security-focused Laravel static analyser

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

Code style checking for Rails-related RSpec files.

Node.js dependency tracing utility

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

PHP Compatibility check for PHP_CodeSniffer