Search awesome repositories

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

An extremely fast Python linter and code formatter, written in Rust.

ShellCheck, a static analysis tool for shell scripts

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Dockerfile linter, validate inline bash, written in Haskell

Continuous Inspection

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

A static analysis security vulnerability scanner for Ruby on Rails applications

Tfsec is now part of Trivy

Static Analyzer for Solidity and Vyper

It's not just a linter that annoys you!

A static type analyzer for Python code

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

Chat with (and visualize) your codebase

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Interactive architecture diagrams for codebases

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?

Manage translation and localization with static analysis, for Ruby i18n

Various code metrics for Python code

AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix

An Intelligent Python Code Quality Analyzer

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Code style checking for RSpec files.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).