代码质量

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

🔥 Fast, strict, configurable, extensible, and beautiful linter for Go

An extensible multilanguage static code analyzer.

⚠️ Stop saying "you forgot to …" in code review

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

🚀Optimizer for mobile applications

📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.

A static type analyzer for Python code

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.

Official ESLint plugin for Vue.js

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

🛡 I2P: End-to-End encrypted and anonymous Internet

Antigravity, Claude Code, Codex, Copilot, Gemini, Muse, OpenCode, Pi, and Prime Agent versions of Poteto's pstack. Rigorous agent workflows with Cursor primitives translated for other harnesses.

Code smell detector for Ruby

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Static analysis tool to detect potential nil panics in Go code

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

a code review TUI with vim keybindings

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

A Ruby code quality reporter

Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

The official repo for Blokada apps.

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

Soot - A Java optimization framework

Flowistry is an IDE plugin for Rust that helps you focus on relevant code.

Zero-Trust access management with true WireGuard® 2FA/MFA

A reviewed list of useful PHP static analysis tools

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Interactive architecture diagrams for codebases

GitHub Pull Requests for Visual Studio Code

nodejsscan is a static security code scanner for Node.js applications.

The missing CMake project initializer

The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server for coding agents. Find what you want without reading the repo, then check you built what you meant — blast radius, tests-to-run, quality deltas. Signatures at 74.7% fewer bytes than bodies; every guess labelled, every loss published. Paddle out with a map.

extendable code review and QA agent 🚢

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

A cryptographically verifiable code review system for the cargo (Rust) package manager.

Converts JavaScript to TypeScript and TypeScript to better TypeScript. 🧫

Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?

Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等

Manage translation and localization with static analysis, for Ruby i18n

Create On Demand Disposable OpenVPN Endpoints on AWS.

Static analyzer and linter for Clojure code that sparks joy