Awesome GitHub RepositoriesCode Analysis Tools

This project is a community-driven directory and knowledge base for the PHP ecosystem. It serves as a comprehensive index of high-quality libraries, frameworks, tools, and educational materials, designed to help developers navigate the landscape and select appropriate solutions for their software projects. The directory distinguishes itself through a hierarchical taxonomy that organizes vast amounts of technical information into a logical, human-readable structure. By relying on distributed contributions from the developer community, it maintains a current and vetted collection of references

Tree-sitter is a parsing system and incremental parsing framework designed to generate high-performance syntax trees from source code. It functions as a language parsing engine that compiles formal grammar definitions into portable code, which can then be integrated into text editors and development tools to facilitate structural analysis, code navigation, and syntax highlighting. The project distinguishes itself through its ability to maintain valid, usable syntax tree structures even when source code contains syntax errors or incomplete fragments. It utilizes a generalized parsing algorithm

Lit is a library for building lightweight, interoperable web components. It provides a base class that leverages native browser APIs to encapsulate state, logic, and styles, allowing developers to create custom elements that function consistently across any modern web project. The framework distinguishes itself through a reactive property system that automatically triggers efficient, batched DOM updates. By utilizing tagged template literals, it defines declarative UI structures that are compiled into optimized update instructions. Its architecture emphasizes modularity through a reactive con

Oxc is a high-performance toolchain designed for the analysis, linting, formatting, and transformation of JavaScript and TypeScript codebases. It functions as a comprehensive static analysis engine and compiler-based utility, providing the infrastructure necessary to parse source code into high-performance abstract syntax trees and map complex module dependency graphs across entire projects. The project distinguishes itself through its use of multi-core parallel processing to maximize throughput during intensive tasks like linting and minification. It offers deep, type-aware static analysis t

Cheat Engine is a software reverse engineering suite and memory editor designed for the Windows environment. It functions as a comprehensive platform for inspecting, analyzing, and modifying the internal logic and data structures of running applications. The tool provides capabilities for real-time memory scanning and manipulation, allowing users to locate and alter specific values within a process's address space. It distinguishes itself through advanced debugging features, including hardware-assisted debugging, kernel-mode driver injection for bypassing memory protections, and dynamic binar

This project is a high-performance static type checker and comprehensive development toolkit for Python. It functions as a core analysis engine that identifies type inconsistencies and enforces code correctness, while simultaneously providing a language server implementation to deliver real-time diagnostics and intelligence directly within development environments. The tool distinguishes itself through a parallelized execution engine that maximizes performance across large-scale codebases and monorepo structures. It supports gradual type adoption, allowing developers to integrate type checkin

Infer is a static analysis toolset for Java, C, C++, and Objective-C designed to detect memory leaks, null dereferences, and resource bugs. It functions as a multi-language bug finder that identifies race conditions, deadlocks, and memory safety issues by translating source code into a common intermediate representation for analysis. The project distinguishes itself through an inter-procedural data flow analyzer that tracks movement between sources and sinks to detect tainted flows and generate data flow graphs. It also includes a framework for verifying temporal properties and reachability u

osv-scanner is a software composition analysis tool and vulnerability scanner that checks project dependencies and container images against the Open Source Vulnerabilities database. It functions as a dependency remediation tool and can be integrated into custom Go applications as a programmable security library. The project distinguishes itself through a remediation workflow that includes an interactive terminal user interface and automated scripting for upgrading vulnerable packages in lockfiles and manifests. It employs call-graph reachability analysis to determine if vulnerable code is act

ReflectionCommon is a PHP reflection interface library and code analysis abstraction. It serves as a foundation for static analysis by providing a shared specification for representing classes, methods, and properties during programmatic code inspection. The project standardizes the reflection API to decouple analysis tools from specific PHP reflection implementations. This ensures that different analysis implementations can work interchangeably through a consistent layer of interfaces. The library covers the domain of PHP code analysis and static analysis tooling, establishing a common way

Semantic, Haskell-आधारित एक लाइब्रेरी और कमांड-लाइन टूल है जिसे पॉलीग्लॉट सोर्स कोड एनालिसिस के लिए डिज़ाइन किया गया है। यह एक स्टैटिक प्रोग्राम एनालिसिस फ्रेमवर्क और पॉलीग्लॉट एब्सट्रैक्ट सिंटैक्स ट्री (AST) पार्सर के रूप में कार्य करता है, जो व्याकरण परिभाषाओं के आधार पर कई प्रोग्रामिंग भाषाओं को स्ट्रक्चर्ड सिंटैक्स ट्री में बदलता है। यह सिस्टम अपने सिमेंटिक कोड कंपैरिजन इंजन के माध्यम से खुद को अलग करता है, जो टेक्स्टुअल अंतरों पर निर्भर रहने के बजाय कोड वर्ज़न्स के बीच स्ट्रक्चरल और अर्थपूर्ण बदलावों का पता लगाता है। यह सतह की भाषाओं को एक एकीकृत पॉलीग्लॉट इंटरमीडिएट रिप्रेजेंटेशन में अनुवाद करके विभिन्न प्रोग्रामिंग सिंटैक्स के बीच एनालिसिस को सक्षम बनाता है। यह फ्रेमवर्क Rust, Go, Python, Ruby, PHP, TypeScript और TSX जैसी भाषाओं को पार्स करने के लिए व्यापक क्षमताएं प्रदान करता है। यह कोड स्कोप मैपिंग, सिंबल एक्सट्रैक्शन और सिमेंटिक ग्राफ जनरेशन के माध्यम से सिमेंटिक एनालिसिस को कवर करता है, साथ ही पैटर्न एनालिसिस और प्रोग्राम बिहेवियर इवैल्यूएशन के लिए भी टूल प्रदान करता है। इस टूलसेट में Haskell सोर्स फ़ाइल लेआउट को स्टैंडर्डाइज़ करने के लिए कमांड-लाइन यूटिलिटीज़ शामिल हैं।

AFL++ is a coverage-guided fuzzing framework that discovers crashes and hangs in software by mutating inputs while tracking which code paths are exercised. It functions as both a fuzzing engine and a campaign manager, supporting targets with or without source code through compile-time instrumentation, dynamic binary instrumentation, and emulation. The framework includes tools for crash triage and analysis, test case minimization, and campaign deployment across local or distributed environments. The framework distinguishes itself through its breadth of instrumentation backends, allowing users

This project is a framework for building, manipulating, and analyzing abstract syntax trees. It provides a toolkit for defining, traversing, and validating syntax trees that are compatible with the Mozilla Parser API, serving as a foundation for static code inspection and automated transformation tasks. The library distinguishes itself through a declarative type system that enforces structural integrity across node hierarchies. By wrapping raw syntax nodes in context-aware objects, it enables developers to track parent relationships and ancestor chains without modifying the underlying tree st