Open source. Open possibilities.

ripr is a static mutation-exposure analysis tool that identifies changed behavior your tests reach but don't actually verify, without running mutation testing.

PyFlow is a research-oriented static analysis framework for Python, offering IRs, program analysis, optimization passes, security checking, supply-chain analysis, and CLI/LSP/MCP tooling.

MCP server and CLI tool that gives coding agents a structural map of codebases across 20+ languages using tree-sitter, reducing token usage by up to 75% compared to grep-based exploration.

Loctree is a fast, multi-language static analysis tool and MCP/LSP server designed to provide structural code intelligence for AI agents and developers, offering dependency graph queries, dead export detection, and circular import analysis.

Lintro is an MIT-licensed command-line tool that brings many linters, formatters, type checkers and security scanners together under one interface, with consistent reports, auto-fixing, Docker images and optional AI-assisted review using your own API key.

A Python CLI and MCP server that reads a git diff against a CodeGraph index and returns a short ranked list of the user journeys a change could have broken, instead of re-running every test. Recall-first, driven by a journey registry and guarded against stale indexes.

SecureFlow is a local-first application security platform in Rust. It combines deterministic source-to-sink analysis, human validation workflows, and offline API inventorying. The tool prioritizes reproducible evidence, maintaining strict separation between automated candidates and final human judgments, with no automatic vulnerability validation.

RepoScout is a fast, local-first Rust CLI for repository intelligence, providing code metrics, complexity analysis, and duplication detection for humans and coding agents.

gha-doctor is a zero-config CLI that diagnoses GitHub Actions workflows for flaky jobs, wasted minutes, slow steps, cache problems and anti-patterns, with static lint rules, run-history analysis, a health score badge, auto-fixes, SARIF/HTML/JSON reports, a GitHub Action and an MCP server.

Ditto scans JavaScript/TypeScript repositories with ts-morph, fingerprints each function through an LLM, clusters behavioural duplicates by embedding, then executes pure functions in a sandbox to show where they diverge.