analysis-tools-dev / static-analysis

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

facebook / pyrefly

A fast type checker and language server for Python

kucherenko / jscpd

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

fallow-rs / fallow

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

crate-ci / typos

Source code spell checker

tach-org / tach

A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust

uber / piranha

A tool for refactoring code related to feature flag APIs

the-open-engine / zeroshot

Open-source orchestration for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure.

bencherdev / bencher

🐰 Bencher - Continuous Benchmarking

rohaquinlop / complexipy

Blazingly fast cognitive complexity analysis for Python, written in Rust.

crabbuild / compass

Native, local-first knowledge graph engine for code and project artifacts—inspired by Graphify, built in Rust, and evolving beyond it.

supercorp-ai / supercov

Coverage, security and code quality for coding agents

tool-bunker / code-buster

Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security and style heuristics, quality scores, and remediation plans.

sysprog21 / commentflow

Reflow comments in C, C++, Rust, POSIX shell, and GAS assembly