GitHub Release Tracker
All JS React Ruby Go Postgres Frontend Node

static-analysis

Past 30d, sorted by best first
14 results Markdown version
08/10 9
sverweij/Dependency cruiser v18.2.0
Validate and visualize project dependencies with customizable rules.
08/26 8
semgrep/Semgrep v1.175.0
Fast static analysis tool that searches code for bugs and enforces coding standards.
08/26 8
securego/gosec v2.29.0
Inspects Go source code for security issues by scanning the AST and SSA representations.
08/21 8
mgechev/revive v1.16.0
Fast and configurable linter for Go with support for custom rules and strict presets.
Go 5547☆ 3341d old #golang #linter #go #static-analysis #golint
08/10 8
anchore/Syft v1.51.0
CLI tool and library for generating Software Bill of Materials from container images and filesystems.
08/10 8
Automated framework for mobile application security testing, malware analysis, and privacy assessment.
08/20 7
Shopify/Rubydex v0.4.0
High-performance static analysis toolkit for the Ruby language, providing a shared Ruby and Rust API for building tools like type checkers and linters.
08/12 7
presidentbeef/Brakeman v8.0.6
Static analysis tool checking Ruby on Rails applications for security vulnerabilities.
08/10 7
TheOrcDev/shadscan v0.12.0
Deterministic CLI audits for shadcn React apps, scoring UI fundamentals 0–100 with evidence-backed findings across accessibility, states, forms, and polish.
TypeScript 528☆ 68d old #javascript #typescript #reactjs #react #cli
07/28 6
CodeBoarding/CodeBoarding v0.13.1
LLM-enhanced static-analysis tool that generates interactive, high-level diagrams of codebases to aid onboarding and comprehension.
Python 2371☆ 483d old #python #static-analysis #llms #agents #aiagentic
08/21 5
dominikh/Staticcheck 2026.2.1
Advanced linter for the Go programming language that detects bugs, performance issues, and enforces style rules.
08/14 5
ast-metrics/AST Metrics v0.42.1
AST Metrics is a multi-language code quality analyzer that measures complexity, architecture, coupling, test quality, and bus factor, flagging only PR regressions deterministically.
07/29 5
JetBrains/Qodana v2026.2.0
Code quality monitoring tool that identifies and suggests fixes for bugs, security vulnerabilities, and code duplications.
08/19 4
SonarSource/SonarJS 13.7.0.44407
Static code analyzer for JavaScript, TypeScript, and CSS providing code quality, security rules, and metrics.