Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONCheckstyle is a Java development tool that helps programmers write code adhering to coding standards. It supports Google Java Style and Sun Conventions, is highly configurable, and integrates with build tools like Maven and Ant.
Loctree is a fast, multi-language static analysis tool and MCP/LSP server designed to provide structural code intelligence for AI agents and developers, offering dependency graph queries, dead export detection, and circular import analysis.
SwiftLint is a widely-used open-source linter for Swift code that enforces style and conventions with over 200 configurable rules, integrating with Xcode, VS Code, CI pipelines, and more.
RepoScout is a fast, local-first Rust CLI for repository intelligence, providing code metrics, complexity analysis, and duplication detection for humans and coding agents.
ripr is a static mutation-exposure analysis tool that identifies changed behavior your tests reach but don't actually verify, without running mutation testing.
PyFlow is a research-oriented static analysis framework for Python, offering IRs, program analysis, optimization passes, security checking, supply-chain analysis, and CLI/LSP/MCP tooling.
SecureFlow is a local-first application security platform in Rust. It combines deterministic source-to-sink analysis, human validation workflows, and offline API inventorying. The tool prioritizes reproducible evidence, maintaining strict separation between automated candidates and final human judgments, with no automatic vulnerability validation.
MCP server and CLI tool that gives coding agents a structural map of codebases across 20+ languages using tree-sitter, reducing token usage by up to 75% compared to grep-based exploration.
A Python CLI and MCP server that reads a git diff against a CodeGraph index and returns a short ranked list of the user journeys a change could have broken, instead of re-running every test. Recall-first, driven by a journey registry and guarded against stale indexes.
Ruff is an extremely fast Python linter and code formatter written in Rust, designed to replace multiple tools like Flake8, Black, and isort with a single interface.
Syft is a CLI tool and Go library for generating Software Bills of Materials (SBOM) from container images and filesystems, supporting multiple ecosystems and output formats.
ShellCheck is a GPLv3 static analysis tool for bash/sh shell scripts that flags syntax issues, semantic problems, and portability pitfalls. It runs in terminals, editors, and CI pipelines, with output formats including JSON, CheckStyle XML, and GCC-compatible warnings.
reviewdog is an automated code review tool that integrates with any linter or code analysis tool regardless of programming language. It filters findings by diff and posts review comments to GitHub, GitLab, Bitbucket, and other code hosting services via CI pipelines.
gha-doctor is a zero-config CLI that diagnoses GitHub Actions workflows for flaky jobs, wasted minutes, slow steps, cache problems and anti-patterns, with static lint rules, run-history analysis, a health score badge, auto-fixes, SARIF/HTML/JSON reports, a GitHub Action and an MCP server.
A comprehensive curated collection of tools and recipes for Go projects, covering testing, dependencies, visualization, and static analysis.
Lintro is an MIT-licensed command-line tool that brings many linters, formatters, type checkers and security scanners together under one interface, with consistent reports, auto-fixing, Docker images and optional AI-assisted review using your own API key.
Ditto scans JavaScript/TypeScript repositories with ts-morph, fingerprints each function through an LLM, clusters behavioural duplicates by embedding, then executes pure functions in a sandbox to show where they diverge.
ImHex is a feature-rich, cross-platform hex editor built for reverse engineers, programmers, and anyone doing binary analysis. It offers a custom pattern language, data inspector, diffing, disassembler, YARA scanning, node-based data processing, theming, and plugin support.
Checkov is an open-source static analysis tool that scans infrastructure-as-code files and container images for security misconfigurations and vulnerabilities, supporting Terraform, CloudFormation, Kubernetes, Dockerfile, and more with over 1000 built-in policies.
