#static-code-analysis

A tool to automatically fix PHP Coding Standards issues

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

Bandit is a tool designed to find common security issues in Python code.

PHP Static Analysis Tool - discover bugs in your code without running it!

A RuboCop extension focused on enforcing Rails best practices and coding conventions.

Go security checker

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

An extremely fast Python linter and code formatter, written in Rust.

Go security checker

Inspects Python source files and provides information about type and location of classes, methods etc

Go security checker

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

🐊 Pluggable and configurable JavaScript Linter, code transformer and formatter with superpowers 💪: built-in support of js, jsx, ts, markdown, yaml, toml, json and ignore. Write declarative codemods in a simplest possible way 😏

Sophisticated static program analysis framework for the R programming language.

Next-gen phpDoc parser with support for intersection types and generics

Doctrine extensions for PHPStan

PHPUnit extensions and rules for PHPStan

A RuboCop extension focused on enforcing Rails best practices and coding conventions.

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

Nette Framework class reflection extension for PHPStan & framework-specific rules

Extra strict and opinionated rules for PHPStan

PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.

An extension of RuboCop focused on code performance checks.

PHPStan extension for webmozart/assert