All repos — GH Trending Explorer

Code graph and memory for your coding agents, in one Rust program. For Claude Code, Codex, Cursor and any MCP client.

A static analyzer for Java, C, C++, and Objective-C

Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.

astral-sh / ruff

An extremely fast Python linter and code formatter, written in Rust.

DeusData / codebase-memory-mcp

Local code intelligence for developers and AI agents. Connect code, docs and infrastructure in a persistent graph, with CBM Lens, MCP tools, agent integrations and change-aware test selection.

eslint / eslint

Find and fix problems in your JavaScript code.

biomejs / biome

A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

ycm-core / YouCompleteMe

A code-completion engine for Vim

doocs / source-code-hunter

😱 从源码层面，剖析挖掘互联网行业主流技术的底层实现原理，为广大开发者 “提升技术深度” 提供便利。目前开放 Spring 全家桶，Mybatis、Netty、Dubbo 框架，及 Redis、Tomcat 中间件等

semgrep / semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

yusufkaraaslan / Skill_Seekers

Convert documentation websites, GitHub repositories, and PDFs into Claude AI skills with automatic conflict detection

analysis-tools-dev / static-analysis

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

phpstan / phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

halfrost / Halfrost-Field

✍🏻 Source Code Deep Dives, System Design & Engineering Blogs | Halfrost-Field 冰霜之地：源码解析、系统设计与工程实践笔记

rubocop / rubocop

A Ruby static code analyzer and formatter, based on the community Ruby style guide.

wonderwhy-er / DesktopCommanderMCP

This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities

reviewdog / reviewdog

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

checkstyle / checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

securego / gosec

Go security checker

PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.

universal-ctags / ctags

A maintained ctags implementation

larastan / larastan

⚗️ Adds code analysis to Laravel improving developer productivity and code quality.

javaparser / javaparser

Java 1-25 Parser and Abstract Syntax Tree for Java with advanced analysis functionalities.

pylint-dev / pylint

It's not just a linter that annoys you!

phan / phan

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

revive-lint / revive

🔥 Fast, strict, configurable, extensible, and beautiful linter for Go

pmd / pmd

An extensible multilanguage static code analyzer.

braedonsaunders / codeflow

Paste any GitHub URL → interactive architecture map. See how files connect, find what breaks if you change something. No install, no accounts — runs entirely in your browser.

vitali87 / code-graph-rag

The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs

rrrene / credo

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

uber / NullAway

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

spotbugs / spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

PyCQA / flake8

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

joernio / joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

htmlhint / HTMLHint

⚙️ The static code analysis tool you need for your HTML

tach-org / tach

A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

standard / eslint-config-standard

ESLint Config for JavaScript Standard Style

ajinabraham / nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

mgechev / codelyzer

Static analysis for Angular projects.

redhat-et / ripwire

The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server for coding agents. Find what you want without reading the repo, then check you built what you meant — blast radius, tests-to-run, quality deltas. Signatures at 74.7% fewer bytes than bodies; every guess labelled, every loss published. Paddle out with a map.

find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Kritt-ai / open-kritt

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

m14r41 / PentestingEverything

glebm / i18n-tasks

Manage translation and localization with static analysis, for Ruby i18n

microsoft / pylance-release

Documentation and issues for Pylance

jplag / JPlag

State-of-the-Art Source Code Plagiarism & Collusion Detection. Check for plagiarism in a set of programs.

INRIA / spoon

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

zzet / gortex

High-performance code-intelligence engine for AI agents and IDE, supports 257 languages, multi repositories, based on graph, with access via CLI, MCP Server, and API. AI coding agents teammate - expose only needed information, cutting token usage up to 50x. 100% local. Discord: https://discord.gg/39MFHu3J5d

ycm-core / ycmd

A code-completion & code-comprehension server

SVF-tools / SVF

Static Value-Flow Analysis Framework for Source Code

phpstan / phpdoc-parser

Next-gen phpDoc parser with support for intersection types and generics

SonarSource / SonarJS

SonarSource Static Analyzer for JavaScript and TypeScript

ipyflow / ipyflow

A reactive Python kernel for Jupyter notebooks.

regexident / cargo-modules

Visualize/analyze a Rust crate's internal structure

SonarSource / sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

larlarua / AutoCVE

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

souffle-lang / souffle

Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.

analysis-tools-dev / dynamic-analysis

⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.

ix-infrastructure / Ix

Understand any codebase instantly. System intelligence for codebases, built for humans and AI.