Awesome GitHub RepositoriesStatic Code Analysis

Codegraph is a local codebase indexer and static analysis graph database that serves as a context provider for AI agents. It parses multiple programming languages into a searchable knowledge graph of symbols and dependencies, exposing these relationships to AI tools through the Model Context Protocol. The project distinguishes itself by aggregating relevant code snippets and symbol flows to reduce token usage for large language models. It automates the configuration of server settings and steering instructions across various AI agent platforms and command line editors to enable automatic code

The .NET Compiler Platform is a collection of open-source APIs for C# and Visual Basic that provides deep code analysis, refactoring, and automated source code generation. It serves as the core infrastructure for building development tools, offering a platform to inspect, modify, and understand source code through immutable syntax trees and semantic models. The platform distinguishes itself by providing full-fidelity syntax trees that preserve every character of source code, including whitespace and comments, alongside an incremental compilation pipeline that enables near-instant feedback dur

Sourcetrail is an interactive source code explorer and visualizer designed for indexing and navigating relationships between symbols and structures across large, multi-language codebases. It functions as a static analysis indexer and code dependency visualizer that maps calls and dependencies between source files to help reveal project architecture. The tool enables multi-language project analysis by using a language-agnostic indexing system to track symbols across different programming languages within a single interface. It allows for the discovery of software architecture and the explorati

This project is a comprehensive development plugin for the Vim text editor, designed to transform the editor into a specialized environment for Go software development. It provides a suite of integrated tools that facilitate the entire development lifecycle, including writing, maintaining, and navigating Go source code. The plugin distinguishes itself by orchestrating external command-line binaries and language servers to perform heavy analysis, compilation, and formatting tasks as background processes. By mapping editor events to these external tools and utilizing virtual file system synchro

Gitdiagram is a software architecture visualization tool that generates interactive diagrams from repository file hierarchies. By performing automated static code analysis, the system maps file structures and component dependencies to provide a visual representation of how different modules relate within a codebase. The platform functions as a searchable documentation catalog, allowing users to discover and explore architectural visualizations of public repositories. It combines server-side rendering for initial delivery with a client-side engine that enables users to dynamically manipulate a

This project is a static analysis engine and type checker designed for PHP codebases. It evaluates source code structure and type annotations to identify potential bugs, type mismatches, and logic errors without executing the application. By parsing code into an abstract syntax tree and applying a rule-based validation framework, it enforces code quality and safety standards across a project. What distinguishes this tool is its sophisticated type inference engine, which models dynamic language features, magic methods, and conditional types to maintain accuracy even in unconventional code. It

de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un

Diese Bibliothek ist ein PHP-Quellcode-Tokenizer und ein Tool zur statischen Analyse, das rohen PHP-Code in diskrete Token und strukturierte XML-Repräsentationen umwandelt. Sie fungiert als Serialisierer, der Token-Streams in ein maschinenlesbares Format für die programmatische Analyse und Quellbaum-Manipulation transformiert. Das Projekt verwendet Stream-basierte XML-Serialisierung und Fragment-basiertes Puffer-Schreiben, um den Speicherbedarf bei der Verarbeitung großer Dateien gering zu halten. Es ermöglicht eine benutzerdefinierte XML-Namespace-Konfiguration, um die Schema-Kompatibilität sicherzustellen und Namenskollisionen während des Transformationsprozesses zu vermeiden. Das Toolkit deckt die lexikalische Analyse und die Konvertierung von Quellcode in strukturiertes XML ab, um Workflows zur statischen Codeanalyse zu unterstützen. Es verarbeitet Token-Streams in einem einzigen Durchgang, um flache Quelllisten in eine hierarchische XML-Struktur zu organisieren.

SublimeCodeIntel ist ein Code-Intelligence-Plugin für den Sublime-Text-Editor, das symbolbasierte Navigation, Autocomplete und Funktions-Tooltips bereitstellt. Es fungiert als IDE-Funktionserweiterung und statische Code-Analyse-Engine, die einen sprachübergreifenden Symbol-Indexer verwendet, um Definitionen über mehrere Dateien hinweg zu verfolgen. Das System implementiert statische Analyse-Tools, um Definitionen und Referenzen abzubilden, ohne den Programmcode auszuführen. Dies ermöglicht es Benutzern, zu Symboldefinitionen im gesamten Projekt zu springen und während des Tippens Echtzeit-Vorschläge für Module und Symbole zu erhalten. Das Toolset deckt breite Funktionsbereiche ab, einschließlich Code-Navigation, intelligenter Code-Vervollständigung und der Anzeige von Funktionsmetadaten in der Statusleiste des Editors.

vim-lsp is a Vim plugin that implements the Language Server Protocol to provide an asynchronous code intelligence tool for the editor. It serves as a bridge between Vim and external language servers, providing semantic code analysis and IDE-like navigation and diagnostics. The project provides a refactoring interface for renaming symbols across a workspace and applying quick-fixes. It also enables semantic highlighting, which color-codes elements based on their meaning as determined by the language server. The plugin covers a broad surface of capabilities, including symbol navigation and dis