#static-analysis

Extension for PHPStan to allow analysis of Drupal code.

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

A Ruby code quality reporter

Standalone static analysis for ABAP

Linting rules for Alley Interactive

Show unused composer dependencies by scanning your code

APISpec - Generate OpenAPI 3.1 specs from Go code with intelligent framework detection and call graph analysis. Supports Gin, Echo, Chi, Fiber, and net/http.

The system of record for AI-written software. A persistent graph of entities, relationships, changes, and provenance, so humans and AI agents see what a change touches before it merges. Beside Git today.

Code graph builder for AI code review — parses 14 languages into structural graphs for blast radius, risk scoring, and test gap analysis.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

ArchUnitTS is an architecture testing library. Specify and ensure architecture rules in your TypeScript app. Easy setup and pipeline integration.

Docker image that provides static analysis tools for PHP

An artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.

Stop AI coding agents from rediscovering large TypeScript/Node repos with task-aware local context packs.

Code intelligence CLI — function-level dependency graph across 34 languages, 34-tool MCP server for AI agents, complexity metrics, architecture boundary enforcement, CI quality gates, git diff impact with co-change analysis, hybrid semantic search. Fully local, zero API keys required.

:bug: A tool that can speed up linting of php files by running several lint processes at once.

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, impact analysis, symbol search, and more.

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.

📏 Various extra strict PHPStan rules we found useful in ShipMonk.

Code smell detector for Ruby

XSL Linter

Enhanced static analysis for Yii2 applications with PHPStan. Precise type inference, dynamic method resolution, and comprehensive property reflection.

An MCP Server to utilize Codelogic's rich software dependency data in your AI programming assistant.

:ab: Tool to compare two revisions of a class API to check for BC breaks

Extensions for PHPStan

🛡️ Configurable PHP architecture guards — define your layers and rules, then keep them enforced

Awesome autocompletion, static analysis and refactoring library for python

Maintainability checks and repair-loop diagnostics for AI-assisted Python repositories.

TypeScript Compiler API wrapper for static analysis and programmatic code changes.