How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing the code. It serves as a quality gate for continuous integration pipelines and a tool for verifying type safety, specifically checking union types, generics, and array shapes. The project is distinguished by its use of a background daemon and Language Server Protocol implementation, which provide real-time diagnostics and navigation within editors. It also features a baseline-based suppression system that allows developers to record existing errors in a snapshot file to focus e
Security-focused static analysis for the Phoenix Framework
Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It identifies common security vulnerabilities, such as injection and cross-site scripting, by analyzing the application codebase without executing the application. The tool functions as a security auditor that detects mass assignment risks and template vulnerabilities. It evaluates the final output of rendered views and identifies unrestricted assignment patterns that could allow unauthorized modification of model attributes. The system provides vulnerability management through the us
A static analysis tool for security
The main features of designsecurity/progpilot are: Static Analysis Tools, Static Analysis, Static Analyzers, Static Code Analysis, Testing Tools.
Projects with overlapping indexed features include: psecio/parse — Parse: A Static Security Scanner. phan/phan — Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing… floedesigntechnologies/phpcs-security-audit. presidentbeef/brakeman — Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It… nccgroup/sobelow — Security-focused static analysis for the Phoenix Framework. securego/gosec — gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws.…