-
zizmor
Static analysis for GitHub Actions
-
ra_ap_load-cargo
Loads a Cargo project into a static instance of rust-analyzer for analysis
-
sprocket
A command line tool for working with Workflow Description Language (WDL) documents
-
mago-type-syntax
core utilities useful for building lexers and parsers within Mago
-
mad-useful
A multi-tool utility for file operations and text processing
-
momoa
A JSON parsing library suitable for static analysis
-
veracode-platform
A comprehensive Rust client library for the Veracode platform (Applications, Identity, Pipeline Scan, Sandbox)
-
decy-parser
C AST parsing using clang-sys for Decy transpiler
-
rapx
A static analysis platform for use-after-free, memory leakage detection, etc
-
cargo-check-external-types
Static analysis tool to detect external types exposed in a library's public API
-
lol-lint
A strict, unapologetic linter for LOLCODE
-
octofhir-fhirpath-analyzer
FHIRPath static analysis and type-enriched AST engine with semantic validation
-
decy-hir
High-level Intermediate Representation for C-to-Rust transpilation
-
of-vscode-project-generator-rs
openFrameworks VSCode Project Generator (for static analysis only)
-
decy-ownership
Ownership and lifetime inference for C-to-Rust conversion (CRITICAL)
-
flowistry
Modular information flow analysis
-
rusty-cpp
A Rust-based static analyzer that applies Rust's ownership and borrowing rules to C++ code
-
ruchyruchy
JIT Compiler + Advanced Debugging Tools - Cranelift-based JIT with mixed-mode execution, eBPF syscall tracing, statistical profiling, 10 quality tools, automated bug detection, 95%+ detection rate…
-
garbage-code-hunter
A humorous Rust code quality detector that roasts your garbage code
-
cargo-fa
Static analysis tool for framealloc - detect memory intent violations before runtime
-
fta
Fast TypeScript Analyzer
-
decy-analyzer
Static analysis and type inference for C code
-
lynx_eye
A code complexity analyzer for JavaScript, TypeScript, and Rust using tree-sitter. Calculates NLOC, CCN, token count, and complexity scores.
-
issun-analyzer
Static analysis tools for ISSUN game framework code
-
arch-lint-core
Core framework for architecture linting - traits, types, and analyzer
-
cargo_pup
architectural linting tool that integrates with rustc to enforce architectural patterns and boundaries
-
oxidescan
A fast, human-friendly Rust code health checker that runs in seconds and tells you what’s risky, what’s slow, and what’s messy—so you can ship with confidence
-
loctree
Fast, language-aware codebase analyzer for detecting dead exports, circular imports, and generating dependency graphs
-
pylyzer
A static code analyzer & language server for Python
-
decy-stdlib
C standard library prototypes for the Decy C-to-Rust transpiler
-
nu-lint
Linter for Nu shell scripts that helpfully suggests improvements
-
sarif_rust
A comprehensive Rust library for parsing, generating, and manipulating SARIF (Static Analysis Results Interchange Format) v2.1.0 files
-
decy
CLI tool for C-to-Rust transpilation with EXTREME quality standards
-
decy-verify
Safety property verification for transpiled Rust code
-
bullshitdetector
Blazing-fast pattern detector for magic numbers, hardcoded values, and code smells using regex and golden-ratio math
-
searchdeadcode
A fast CLI tool to detect and remove dead/unused code in Android projects (Kotlin & Java)
-
plceye
PLC code smell detector and static analyzer for L5X and PLCopen files
-
debtmap
Code complexity and technical debt analyzer
-
decy-codegen
Rust code generation from HIR with minimal unsafe blocks
-
dei
Static analysis tool for detecting god classes and god methods
-
flowistry_ide
Information Flow in the IDE for Rust
-
chelonian
Static analyzer for ROS workspaces
-
neural-complexity
Code complexity analyzer for Python and TypeScript using cyclomatic and cognitive complexity metrics
-
arch-lint-rules
Built-in lint rules for arch-lint
-
py2erg
A Python -> Erg converter
-
bappy-script
Gankra's toy compiler
-
mcpsec
Security scanner for Model Context Protocol (MCP) servers
-
aws-fully-qualified-names
For extracting def use statements from code
-
circomspect
A static analyzer and linter for the Circom zero-knowledge DSL
-
rust-guardian
Dynamic code quality enforcement preventing incomplete or placeholder code
-
masterror-template
Template utilities for masterror and its derive macros
-
scoper
A TypeScript code analyzer using the OXC parser
-
arch-lint-macros
Procedural macros for arch-lint rule definitions
-
go-analyzer
A high-performance Language Server Protocol (LSP) implementation for Go code analysis, providing real-time variable lifecycle tracking and data race detection
-
sparta
software components specially designed for building high-performance static analyzers based on the theory of Abstract Interpretation
-
pydeadcode
Fast Python dead code finder, built in Rust
-
omnitype
A hybrid type checker for Python and other dynamic languages
-
decy-agent
Background daemon for incremental transpilation and watching
-
chandeliers-san
AST definition and static analysis procedures of Candle
-
qlty-llm
Code quality toolkit
-
tinymist-analysis
Typst Static Analyzers for Tinymist
-
qlty-types
Code quality toolkit
-
decy-book
Book-based verification for transpiled Rust code
-
kotoba-linter
Kotoba Code Linter - Static analysis tool for .kotoba files
-
veriwasm
A safety verifier for native-compiled WebAssembly code
-
qlty-analysis
Code quality toolkit
-
cpg-rs
working with Code Property Graphs (CPG)
-
am_list
A tree-sitter-powered command line tool to list functions marked with Autometrics annotations
-
qlty-test-utilities
Code quality toolkit
-
qlty-config
Code quality toolkit
-
decy-mcp
MCP server for Claude Code integration
-
qlty-smells
Code quality toolkit
-
decy-repo
GitHub repository transpilation with parallel processing
-
qlty-cloud
Code quality toolkit
-
cargo-recon
Enumerate viable fuzzing targets in Rust code
-
vuln-reach
Code reachability path analysis
-
chandeliers-syn
Syntax of the Lustre language, to be parsed by procedural macros
-
qlty-coverage
Code quality toolkit
-
binsec
Swiss Army Knife for Binary (In)Security
-
autoken
A rust-lang static analysis tool to automatically check for runtime borrow violations
-
cargo-typesize
Cargo extension to list size of all types in a crate
-
pylyzer_core
pylyzer core
-
decy-core
Core transpilation pipeline for C-to-Rust conversion
-
decy-debugger
Interactive debugger for Decy C-to-Rust transpiler with spydecy integration
-
cargo-powdr
CLI to create, manage and run powdrVM projects
-
sfink_callgraph_traversal
Experimental callgraph traversal/analysis tool, currently limited to loading an internal format produced by a static analysis
-
binary-serialize-derive
A small representation for objects in the Ezno checker, used for caching to make checking faster
-
crown-annotation
Annotations that are useful for the static analyser Crown
-
riscv_analysis_cli
RISC-V static analysis tool -- CLI
-
riscv_analysis
RISC-V static analysis tools
-
surrealguard-core
Core static analysis logic for SurrealGuard's powerful type inference
-
autoken-rustc
A rust-lang static analysis tool to automatically check for runtime borrow violations
-
dei-core
Core types and traits for DEI static analysis tool
-
code-blocks-server
re-order your code
-
drake
A tree-sitter based codebase dependency explorer
-
staticrypt_macros
Macros for the
staticryptcrate -
safepkt-backend
A backend to run static analysis tools against rust-based programs
-
stagraph
A graph-based static timing analysis (GB-STA) engine
-
sparta-proc-macros
Rust proc macros
-
riscv_analysis_lsp
RISC-V static analysis tool -- LSP helpers
-
libvex-sys
Basic wrapper around libVEX from Valgrind - source included in the crate, based on trailofbits' static analysis fork
-
token-analyzer
Fast, parallel token security analyzer - Detect exposed secrets, API keys, and sensitive tokens in your codebase
-
cargo-autoken
A rust-lang static analysis tool to automatically check for runtime borrow violations
Try searching with DuckDuckGo.