GitHub Release Tracker
All JS React Ruby Go Postgres Frontend Node

static-analysis

Past 30d, sorted by best first
14 results Markdown version
10/11 9
sverweij/Dependency cruiser v18.6.0
Validate and visualize project dependencies with customizable rules.
09/30 9
presidentbeef/Brakeman v8.1.0
Static analysis tool checking Ruby on Rails applications for security vulnerabilities.
10/07 8
semgrep/Semgrep v1.180.0
Fast static analysis tool that searches code for bugs and enforces coding standards.
10/02 8
troessner/Reek v6.6.0
Ruby code-smell detector that examines classes, modules, and methods and reports high-level issues.
10/01 8
anchore/Syft v1.54.0
CLI tool and library for generating Software Bill of Materials from container images and filesystems.
09/23 8
mgechev/revive v1.17.0
Fast and configurable linter for Go with support for custom rules and strict presets.
Go 5553☆ 3368d old #golang #linter #go #static-analysis #golint
09/23 8
revive-lint/revive v1.17.0
Fast, strict, configurable, extensible, flexible, and beautiful linter for Go with customizable rules, formatters, and optional type checking.
Go 5551☆ 3383d old #golang #linter #go #static-analysis #golint
09/21 7
Automated framework for mobile application security testing, malware analysis, and privacy assessment.
09/12 7
LukasNiessen/ArchUnitTS v2.5.0
Architecture-testing library for TypeScript/JavaScript that enforces dependency rules, detects cycles, and integrates with testing frameworks.
10/08 6
quay/Claircore v1.6.1
Go modules for scanning container layers for installed packages and reporting discovered vulnerabilities.
10/01 6
git-pkgs/brief v0.14.0
Single-binary CLI that detects a project’s toolchain, configuration, and conventions and outputs a structured factual report.
09/16 6
CodeBoarding/CodeBoarding v0.14.2
LLM-enhanced static-analysis tool that generates interactive, high-level diagrams of codebases to aid onboarding and comprehension.
Python 2446☆ 532d old #python #static-analysis #llms #agents #aiagentic
09/29 4
JetBrains/Qodana v2026.2.2
Code quality monitoring tool that identifies and suggests fixes for bugs, security vulnerabilities, and code duplications.
09/24 4
SonarSource/SonarJS 14.0.0.46108
Static code analyzer for JavaScript, TypeScript, and CSS providing code quality, security rules, and metrics.