OPEN SOURCE, OPEN TO EVERYONE

Open source. Open possibilities.

Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.

Human-curated · Discover open source4109discovered

A little curiosity. A world of open source.

THE FIRST COLLECTION
Topic: static-analysis清除
gha-doctorlinnea-bakshi
ADDED

gha-doctor is a zero-config CLI that diagnoses GitHub Actions workflows for flaky jobs, wasted minutes, slow steps, cache problems and anti-patterns, with static lint rules, run-history analysis, a health score badge, auto-fixes, SARIF/HTML/JSON reports, a GitHub Action and an MCP server.

Developer toolsAutomationBuild & DevOps
go-recipesnikolaydubina
ADDED

A comprehensive curated collection of tools and recipes for Go projects, covering testing, dependencies, visualization, and static analysis.

Developer toolsTemplates & starters
py-lintrolgtm-hq
ADDED

Lintro is an MIT-licensed command-line tool that brings many linters, formatters, type checkers and security scanners together under one interface, with consistent reports, auto-fixing, Docker images and optional AI-assisted review using your own API key.

Developer toolsAI & MLTesting & debugging
dittoKartik8Dwivedi
ADDED

Ditto scans JavaScript/TypeScript repositories with ts-morph, fingerprints each function through an LLM, clusters behavioural duplicates by embedding, then executes pure functions in a sandbox to show where they diverge.

Developer toolsAI & MLTesting & debugging
imhexWerWolv
ADDED

ImHex is a feature-rich, cross-platform hex editor built for reverse engineers, programmers, and anyone doing binary analysis. It offers a custom pattern language, data inspector, diffing, disassembler, YARA scanning, node-based data processing, theming, and plugin support.

Developer toolsProductivityEditors & IDEs
checkovbridgecrewio
ADDED

Checkov is an open-source static analysis tool that scans infrastructure-as-code files and container images for security misconfigurations and vulnerabilities, supporting Terraform, CloudFormation, Kubernetes, Dockerfile, and more with over 1000 built-in policies.

Developer toolsAutomationTesting & debugging
checkstylecheckstyle
ADDED

Checkstyle is a Java development tool that helps programmers write code adhering to coding standards. It supports Google Java Style and Sun Conventions, is highly configurable, and integrates with build tools like Maven and Ant.

Developer toolsTesting & debugging
loctreeLoctree
ADDED

Loctree is a fast, multi-language static analysis tool and MCP/LSP server designed to provide structural code intelligence for AI agents and developers, offering dependency graph queries, dead export detection, and circular import analysis.

AI & MLDeveloper toolsCoding assistants
ADDED

SwiftLint is a widely-used open-source linter for Swift code that enforces style and conventions with over 200 configurable rules, integrating with Xcode, VS Code, CI pipelines, and more.

Developer toolsTesting & debugging
reposcoutgordon1210
ADDED

RepoScout is a fast, local-first Rust CLI for repository intelligence, providing code metrics, complexity analysis, and duplication detection for humans and coding agents.

Developer toolsAI & MLCLI & terminal
ripr-swarmEffortlessMetrics
ADDED

ripr is a static mutation-exposure analysis tool that identifies changed behavior your tests reach but don't actually verify, without running mutation testing.

Developer toolsTesting & debugging
pyflowZJU-PL
ADDED

PyFlow is a research-oriented static analysis framework for Python, offering IRs, program analysis, optimization passes, security checking, supply-chain analysis, and CLI/LSP/MCP tooling.

Developer toolsAI & MLTesting & debugging
secureflowdanielcadev
ADDED

SecureFlow is a local-first application security platform in Rust. It combines deterministic source-to-sink analysis, human validation workflows, and offline API inventorying. The tool prioritizes reproducible evidence, maintaining strict separation between automated candidates and final human judgments, with no automatic vulnerability validation.

Developer toolsAI & MLTesting & debugging
scantoolmariusei
ADDED

MCP server and CLI tool that gives coding agents a structural map of codebases across 20+ languages using tree-sitter, reducing token usage by up to 75% compared to grep-based exploration.

AI & MLDeveloper toolsCoding assistants
testgraphinth3shadows
ADDED

A Python CLI and MCP server that reads a git diff against a CodeGraph index and returns a short ranked list of the user journeys a change could have broken, instead of re-running every test. Recall-first, driven by a journey registry and guarded against stale indexes.

Developer toolsAutomationTesting & debugging
ruffastral-sh
ADDED

Ruff is an extremely fast Python linter and code formatter written in Rust, designed to replace multiple tools like Flake8, Black, and isort with a single interface.

Developer toolsTesting & debugging
syftanchore
ADDED

Syft is a CLI tool and Go library for generating Software Bills of Materials (SBOM) from container images and filesystems, supporting multiple ecosystems and output formats.

Developer toolsData & databasesBackend & APIs
shellcheckkoalaman
ADDED

ShellCheck is a GPLv3 static analysis tool for bash/sh shell scripts that flags syntax issues, semantic problems, and portability pitfalls. It runs in terminals, editors, and CI pipelines, with output formats including JSON, CheckStyle XML, and GCC-compatible warnings.

Developer toolsAutomationTesting & debugging
reviewdogreviewdog
ADDED

reviewdog is an automated code review tool that integrates with any linter or code analysis tool regardless of programming language. It filters findings by diff and posts review comments to GitHub, GitLab, Bitbucket, and other code hosting services via CI pipelines.

Developer toolsAutomationBuild & DevOps