代码审计 / SAST

Reverse engineer anything with agents, from app behavior down to native binaries.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

A PHP parser written in PHP

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

OpenVPN is an open source VPN daemon

PHP Static Analysis Tool - discover bugs in your code without running it!

A tool to automatically fix PHP Coding Standards issues

A vulnerability scanner for container images and filesystems

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Blazing-fast remote access

Go security checker

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

A static analysis security vulnerability scanner for Ruby on Rails applications

Catch common Java mistakes as compile-time errors

Static analysis for GitHub Actions (and more)

static analysis of C/C++ code

Visualize call graph of a Go program using Graphviz

Static Analyzer for Solidity and Vyper

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

Awesome autocompletion, static analysis and refactoring library for python

Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

🚀Optimizer for mobile applications

📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.

Official ESLint plugin for Vue.js

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Code smell detector for Ruby

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Static analysis tool to detect potential nil panics in Go code

A Ruby code quality reporter

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

Soot - A Java optimization framework

Flowistry is an IDE plugin for Rust that helps you focus on relevant code.

Zero-Trust access management with true WireGuard® 2FA/MFA

A reviewed list of useful PHP static analysis tools

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Interactive architecture diagrams for codebases

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

The missing CMake project initializer

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Converts JavaScript to TypeScript and TypeScript to better TypeScript. 🧫