static-analysis

The modern Java bytecode editor

A static analysis security vulnerability scanner for Ruby on Rails applications

Catch common Java mistakes as compile-time errors

Tfsec is now part of Trivy

Staticcheck - The advanced Go linter

Visualize call graph of a Go program using Graphviz

Static analysis for GitHub Actions

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

An extensible multilanguage static code analyzer.

🚀Optimizer for mobile applications

Analyze ELF binaries like a boss 😼🕵️‍♂️

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

Code smell detector for Ruby

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Chat with (and visualize) your codebase