Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONCheckov is an open-source static analysis tool that scans infrastructure-as-code files and container images for security misconfigurations and vulnerabilities, supporting Terraform, CloudFormation, Kubernetes, Dockerfile, and more with over 1000 built-in policies.
Checkstyle is a Java development tool that helps programmers write code adhering to coding standards. It supports Google Java Style and Sun Conventions, is highly configurable, and integrates with build tools like Maven and Ant.
SwiftLint is a widely-used open-source linter for Swift code that enforces style and conventions with over 200 configurable rules, integrating with Xcode, VS Code, CI pipelines, and more.
ripr is a static mutation-exposure analysis tool that identifies changed behavior your tests reach but don't actually verify, without running mutation testing.
PyFlow is a research-oriented static analysis framework for Python, offering IRs, program analysis, optimization passes, security checking, supply-chain analysis, and CLI/LSP/MCP tooling.
SecureFlow is a local-first application security platform in Rust. It combines deterministic source-to-sink analysis, human validation workflows, and offline API inventorying. The tool prioritizes reproducible evidence, maintaining strict separation between automated candidates and final human judgments, with no automatic vulnerability validation.
A Python CLI and MCP server that reads a git diff against a CodeGraph index and returns a short ranked list of the user journeys a change could have broken, instead of re-running every test. Recall-first, driven by a journey registry and guarded against stale indexes.
Ruff is an extremely fast Python linter and code formatter written in Rust, designed to replace multiple tools like Flake8, Black, and isort with a single interface.
ShellCheck is a GPLv3 static analysis tool for bash/sh shell scripts that flags syntax issues, semantic problems, and portability pitfalls. It runs in terminals, editors, and CI pipelines, with output formats including JSON, CheckStyle XML, and GCC-compatible warnings.
Lintro is an MIT-licensed command-line tool that brings many linters, formatters, type checkers and security scanners together under one interface, with consistent reports, auto-fixing, Docker images and optional AI-assisted review using your own API key.
Ditto scans JavaScript/TypeScript repositories with ts-morph, fingerprints each function through an LLM, clusters behavioural duplicates by embedding, then executes pure functions in a sandbox to show where they diverge.
