* [Dependency cruiser v18.6.0](https://github.com/sverweij/dependency-cruiser) – Validate and visualize project dependencies with customizable rules.

* [Brakeman v8.1.0](https://github.com/presidentbeef/brakeman) – Static analysis tool checking Ruby on Rails applications for security vulnerabilities.

* [Semgrep v1.180.0](https://github.com/semgrep/semgrep) – Fast static analysis tool that searches code for bugs and enforces coding standards.

* [Reek v6.6.0](https://github.com/troessner/reek) – Ruby code-smell detector that examines classes, modules, and methods and reports high-level issues.

* [Syft v1.54.0](https://github.com/anchore/syft) – CLI tool and library for generating Software Bill of Materials from container images and filesystems.

* [revive v1.17.1](https://github.com/revive-lint/revive) – Fast, strict, configurable, extensible, flexible, and beautiful linter for Go with customizable rules, formatters, and optional type checking.

* [Claircore v1.6.1](https://github.com/quay/claircore) – Go modules for scanning container layers for installed packages and reporting discovered vulnerabilities.

* [brief v0.14.0](https://github.com/git-pkgs/brief) – Single-binary CLI that detects a project’s toolchain, configuration, and conventions and outputs a structured factual report.

* [Staticcheck 2026.2.2](https://github.com/dominikh/go-tools) – Advanced linter for the Go programming language that detects bugs, performance issues, and enforces style rules.

* [Qodana v2026.2.2](https://github.com/JetBrains/qodana-action) – Code quality monitoring tool that identifies and suggests fixes for bugs, security vulnerabilities, and code duplications.

* [SonarJS 14.1.0.46226](https://github.com/SonarSource/SonarJS) – Static code analyzer for JavaScript, TypeScript, and CSS providing code quality, security rules, and metrics.