#static-analysis

A collection of code standards for use with PHP_CodeSniffer

Deterministic Document Integrity Engine for Markdown/MDX graphs.

A memory of the codebase your AI agent can't get from grep: a persistent call graph, semantic search, and per-symbol review learnings over any repo. Self-hosted MCP server — Go, tree-sitter, Apache AGE.

Performant static analyzer for PHP, which is extremely easy to use. It helps you catch common mistakes in your PHP code.

Program dependence graph and architecture/code-flow analysis for BEAM projects

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

Prevent memory leaks and runtime crashes in .NET Dependency Injection. A zero-overhead Roslyn analyzer that catches captive dependencies, undisposed scopes, and lifetime mismatches at compile-time.

MO4 Coding Standard Rules for Codesniffer based on Symfony Coding Standards.

An easy-to-learn/use static analysis framework for Java and Android

PHPStan extension for Mockery

The repo map your coding agent is forced to use — ~98% fewer tokens (up to 99.9% per task) to understand a TS/JS codebase. PageRank hubs, Aider-style symbol ranking, token-budgeted digest, --any router, wired into the agent loop.

Fast Java language server

Command Line Style Checker of XML Documents: to make sure they are always formatted nicely

Run zizmor from GitHub Actions!

High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.

Static analysis for Filament v4/v5 projects. Detect deprecated patterns and code issues.

Yoast coding standards

Workflow-first AI code maintenance for reviews, changelogs, docs, and repository upkeep.

AI pull-request reviewer: hybrid RAG + a code graph + Claude Code/Codex. Whole-repo context, inline GitHub comments grounded on exact code. MCP server + Claude Code/Codex plugin.

Go linter that detects unsafe *gorm.DB instance reuse

Composer plugin for automatic installation of PHPStan extensions.

Core library behind rstcheck.

Cut AI-agent token waste ~90% — query a local SQLite structural index of your JS/TS/CSS codebase with SQL in one round-trip instead of 3–5 file reads. Symbols, imports, calls, components, CSS tokens, coverage, markers. CLI, MCP (21 tools), HTTP, GitHub Action, ESM API. 71 recipes; AST+resolver; SARIF/audit/baselines for CI.

Python Type Checker / Language Server

Official Coding Standards for CodeIgniter

Automated code analysis for Laravel applications with 73 comprehensive analyzers covering security, performance, reliability, code quality, and best practices. Works with Laravel 9+.

Declare which parts of a package may import which, and gate it in CI. An import-topology linter: zones, sealed deep modules, guest lists, cycle bans, reach ceilings - judged against the real import graph.

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

Drop it into your repo and let an AI Senior reviewer go through every PR — inline comments, severity-coded findings, and a general summary, all configurable per project and tech stack. Supports OpenAI, Anthropic, Gemini, and Ollama. Auto-detects your stack (NestJS, Next.js, React, TypeScript, Node, Flutter, Laravel) and applies built-in rules for

Typed async workflows with Result types and automatic error inference