morluto / rea

Reverse engineer anything with agents, from app behavior down to native binaries.

dsherret / ts-morph

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

vuejs / eslint-plugin-vue

Official ESLint plugin for Vue.js

shivammathur / setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

JoshuaKGoldberg / TypeStat

Converts JavaScript to TypeScript and TypeScript to better TypeScript. 🧫

nowsecure / r2frida

Radare2 and Frida better together.

SonarSource / SonarJS

SonarSource Static Analyzer for JavaScript and TypeScript

openqodex / openqodex

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

scanaislop / aislop

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks, and more. 50+ deterministic rules across 10 language targets, with CLI, CI, and GitHub Actions. No LLM at runtime. MIT.

paladini / harness-score

Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

TheOrcDev / shadscan

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

LukasNiessen / ArchUnitTS

ArchUnitTS is an architecture testing library. Specify and ensure architecture rules in your TypeScript app. Easy setup and pipeline integration.

Thworry / reposcope

README-first, evidence-backed analysis for understanding public GitHub repositories before adoption.

stijnswapped / Myrqen

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Juror-AI / juror

Cheaper and better Greptile alternative runs on your own github actions.

yan-mc / dsh-normify

Normify · DSH 插件：把项目架构写成归一化的分形模块树，三层校验（写时 / 校验 / 冻结回执）、30 个 normify_* 工具 + normify-gen 技能，一键渲染单文件交互式架构图；支持伴随式开发（change_open → brief → check → 实施 → refresh → change_close）。

diyanbogdanov / emend

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compiles and passes your tests.

zygiu-zygis / basecoat-ui-mcp

Offline MCP server for Basecoat UI (shadcn/ui look, no React): templates, macro layouts, theming/dark-mode contract, static validation.

luantak / is-malicious

A codebase scanner that helps you not run malicous code

morluto / smokinggun

Help your agents find the smoking gun they're looking for. Optimization evidence for agents: find complexity hotspots.

hi77x / appgraph

Turn a public GitHub repository into an interactive software architecture graph. Static analysis, flow tracing, analytics. MIT licensed.