Awesome GitHub RepositoriesStatic Code Analysis

Codegraph is a local codebase indexer and static analysis graph database that serves as a context provider for AI agents. It parses multiple programming languages into a searchable knowledge graph of symbols and dependencies, exposing these relationships to AI tools through the Model Context Protocol. The project distinguishes itself by aggregating relevant code snippets and symbol flows to reduce token usage for large language models. It automates the configuration of server settings and steering instructions across various AI agent platforms and command line editors to enable automatic code

The .NET Compiler Platform is a collection of open-source APIs for C# and Visual Basic that provides deep code analysis, refactoring, and automated source code generation. It serves as the core infrastructure for building development tools, offering a platform to inspect, modify, and understand source code through immutable syntax trees and semantic models. The platform distinguishes itself by providing full-fidelity syntax trees that preserve every character of source code, including whitespace and comments, alongside an incremental compilation pipeline that enables near-instant feedback dur

Sourcetrail is an interactive source code explorer and visualizer designed for indexing and navigating relationships between symbols and structures across large, multi-language codebases. It functions as a static analysis indexer and code dependency visualizer that maps calls and dependencies between source files to help reveal project architecture. The tool enables multi-language project analysis by using a language-agnostic indexing system to track symbols across different programming languages within a single interface. It allows for the discovery of software architecture and the explorati

This project is a comprehensive development plugin for the Vim text editor, designed to transform the editor into a specialized environment for Go software development. It provides a suite of integrated tools that facilitate the entire development lifecycle, including writing, maintaining, and navigating Go source code. The plugin distinguishes itself by orchestrating external command-line binaries and language servers to perform heavy analysis, compilation, and formatting tasks as background processes. By mapping editor events to these external tools and utilizing virtual file system synchro

Gitdiagram is a software architecture visualization tool that generates interactive diagrams from repository file hierarchies. By performing automated static code analysis, the system maps file structures and component dependencies to provide a visual representation of how different modules relate within a codebase. The platform functions as a searchable documentation catalog, allowing users to discover and explore architectural visualizations of public repositories. It combines server-side rendering for initial delivery with a client-side engine that enables users to dynamically manipulate a

This project is a static analysis engine and type checker designed for PHP codebases. It evaluates source code structure and type annotations to identify potential bugs, type mismatches, and logic errors without executing the application. By parsing code into an abstract syntax tree and applying a rule-based validation framework, it enforces code quality and safety standards across a project. What distinguishes this tool is its sophisticated type inference engine, which models dynamic language features, magic methods, and conditional types to maintain accuracy even in unconventional code. It

de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un

该库是一个 PHP 源代码词法分析器和静态分析工具，将原始 PHP 代码转换为离散的标记（token）和结构化的 XML 表示。它作为一个序列化器，将标记流转换为机器可读的格式，以便进行程序化分析和源代码树操作。 该项目使用基于流的 XML 序列化和基于片段的缓冲区写入，以在处理大文件时保持较低的内存开销。它允许自定义 XML 命名空间配置，以确保模式兼容性并避免转换过程中的命名冲突。 该工具包涵盖了词法分析和将源代码转换为结构化 XML 的功能，以支持静态代码分析工作流。它在单次传递中处理标记流，将扁平的源代码列表组织成层次化的 XML 结构。

SublimeCodeIntel 是一个 Sublime Text 编辑器的代码智能插件，提供基于符号的导航、自动补全和函数提示。它作为一个 IDE 功能扩展和静态代码分析引擎，使用跨语言符号索引器来追踪多个文件中的定义。 该系统实现了静态分析工具，无需执行程序代码即可映射定义和引用。这使得用户能够在整个项目中跳转到符号定义，并在输入时实时获取模块和符号建议。 该工具集涵盖了广泛的能力领域，包括代码导航、智能代码补全以及在编辑器状态栏中显示函数元数据。

vim-lsp is a Vim plugin that implements the Language Server Protocol to provide an asynchronous code intelligence tool for the editor. It serves as a bridge between Vim and external language servers, providing semantic code analysis and IDE-like navigation and diagnostics. The project provides a refactoring interface for renaming symbols across a workspace and applying quick-fixes. It also enables semantic highlighting, which color-codes elements based on their meaning as determined by the language server. The plugin covers a broad surface of capabilities, including symbol navigation and dis