* [Semgrep v1.175.0](https://github.com/semgrep/semgrep) – Fast static analysis tool that searches code for bugs and enforces coding standards.

* [gosec v2.29.0](https://github.com/securego/gosec) – Inspects Go source code for security issues by scanning the AST and SSA representations.

* [revive v1.16.0](https://github.com/mgechev/revive) – Fast and configurable linter for Go with support for custom rules and strict presets.

* [Syft v1.51.1](https://github.com/anchore/syft) – CLI tool and library for generating Software Bill of Materials from container images and filesystems.

* [Rubydex v0.4.0](https://github.com/Shopify/rubydex) – High-performance static analysis toolkit for the Ruby language, providing a shared Ruby and Rust API for building tools like type checkers and linters.

* [shadscan v0.17.1](https://github.com/TheOrcDev/shadscan) – Deterministic CLI audits for shadcn React apps, scoring UI fundamentals 0–100 with evidence-backed findings across accessibility, states, forms, and polish.

* [Staticcheck 2026.2.1](https://github.com/dominikh/go-tools) – Advanced linter for the Go programming language that detects bugs, performance issues, and enforces style rules.

* [AST Metrics v0.42.1](https://github.com/ast-metrics/ast-metrics) – AST Metrics is a multi-language code quality analyzer that measures complexity, architecture, coupling, test quality, and bus factor, flagging only PR regressions deterministically.

* [SonarJS 13.7.0.44407](https://github.com/SonarSource/SonarJS) – Static code analyzer for JavaScript, TypeScript, and CSS providing code quality, security rules, and metrics.