Search Results for "static code analysis"
Sort By:
Showing 89 open source projects for "static code analysis"
View related business solutions-
Go From Idea to Deployed AI App FastAccess Gemini 3 and 200+ models. Build chatbots, agents, or custom models with built-in monitoring and scaling.
-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
1
SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
This SonarSource project is a static code analyzer for JavaScript, TypeScript and CSS languages. In order to analyze JavaScript, TypeScript or CSS code, you need to have a supported version of Node.js installed on the machine running the scan. Recommended versions are the previous LTS version v14 and the latest version - v16. We recommend using the latest available LTS version (v16 as of today) for optimal stability and performance. v12 is still supported, but it already reached end-of-life and is deprecated. ... -
2
Claude Code Action
Claude Code action for GitHub PRs
Claude Code Action is a general-purpose GitHub Action that brings Anthropic’s Claude Code into pull requests and issues to answer questions, review changes, and even implement code edits. It can wake up automatically when someone mentions @claude, when a PR or issue meets certain conditions, or when a workflow step provides an explicit prompt. The action is designed to understand diffs and surrounding context, so its comments and suggestions are grounded in what actually changed rather than... -
3
Pyright
Static type checker for Python
Pyright is a fast type checker meant for large Python source bases. It can run in a “watch” mode and performs fast incremental updates when files are modified. Pyright supports configuration files that provide granular control over settings. Different “execution environments” can be associated with subdirectories within a source base. Each environment can specify different module search paths, python language versions, and platform targets. Type inference for function return values, instance... -
4
DeepSource MCP Server
Model Context Protocol (MCP) server for DeepSource
The DeepSource MCP Server enables AI assistants to interact with DeepSource's code quality analysis capabilities through the Model Context Protocol. It allows retrieval of code metrics, access to issues, quality status checks, and analysis of project quality over time. -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end. Migrate from on-prem or other clouds with free migration tools.
-
5
pgTyped
pgTyped - Typesafe SQL in TypeScript
pgtyped brings type safety to SQL queries in TypeScript by parsing SQL files and generating typed query functions. It analyzes SQL against your PostgreSQL schema and outputs TypeScript code that ensures inputs and results are correctly typed. This allows teams to use raw SQL while retaining the safety and developer experience of TypeScript. -
6
ngx-markdown
Angular markdown component/directive/pipe/service to parse static
Angular markdown component/directive/pipe/service to parse static, dynamic or remote content to HTML with syntax highlight and more. As the library is using Marked parser you will need to add node_modules/marked/marked.min.js to your application. To use the line numbers plugin that shows line numbers in code blocks, in addition to Prism.js configuration files, you will need to include the following files from prismjs/plugins/line-numbers directory to your application. ... -
7
SonarQube MCP Server
Model Context Protocol (MCP) server for SonarQube
The SonarQube MCP Server is a Rust implementation that integrates SonarQube's code quality analysis with AI assistants through the Model Context Protocol. It provides access to code metrics, issues, quality gate statuses, and project quality analysis. -
8
Log4brains
Log and publish your architecture decisions (ADR)
Log4brains is a docs-as-code knowledge base for your development and infrastructure projects. It enables you to log Architecture Decision Records (ADR) right from your IDE and to publish them automatically as a static website. -
9
Shannon
Fully autonomous AI hacker to find actual exploits in your web apps
Shannon is an autonomous AI penetration testing system built to find and prove real, exploitable vulnerabilities in web applications rather than stopping at static warnings or best-guess alerts. It focuses on “proof by exploitation,” meaning it actively hunts for attack vectors in your code and then attempts to execute end-to-end exploits to demonstrate impact. The project blends source-aware analysis with automated web interaction so it can validate issues like injection flaws, authentication bypasses, and other exploitable paths in a way that resembles an actual attacker’s workflow. ... -
Cut Cloud Costs with Google Compute EngineSave on compute costs with Compute Engine. Reduce your batch jobs and workload bill 60-91% with Spot VMs. Compute Engine's committed use offers customers up to 70% savings through sustained use discounts. Plus, you get one free e2-micro VM monthly and $300 credit to start.
-
10
Boilerplate and Starter for Next JS 12+
Boilerplate and Starter for Next.js 12+, Tailwind CSS 3 and TypeScript
Boilerplate and Starter for Next JS 12+, Tailwind CSS 3 and TypeScript. Boilerplate and Starter for Next.js, Tailwind CSS and TypeScript. Made with developer experience first: Next.js, TypeScript, ESLint, Prettier, Husky, Lint-Staged, Jest, Testing Library, Commitlint, VSCode, Netlify, PostCSS, Tailwind CSS. If you are VSCode users, you can have a better integration with VSCode by installing the suggested extension in .vscode/extension.json. The starter code comes up with Settings for a... -
11
vscode-pull-request-github
GitHub Pull Requests for Visual Studio Code
This extension allows you to review and manage GitHub pull requests and issues in Visual Studio Code. The support includes authenticating and connecting VS Code to GitHub. GitHub Enterprise is supported by the community, please see this PR for how to set it up. Listing and browsing PRs from within VS Code. Reviewing PRs from within VS Code with in-editor commenting. Validating PRs from within VS Code with easy checkouts. Terminal integration that enables UI and CLIs to co-exist. Listing and... -
12
tRPC
End-to-end typesafe APIs made easy
tRPC allows you to easily build & consume fully typesafe APIs, without schemas or code generation. As TypeScript and static typing increasingly become a best practice in web programming, the API presents a major pain point. We need better ways to statically type our API endpoints and share those types between our client and server (or server-to-server). We set out to build a simple library for building typesafe APIs that leverage the full power of modern TypeScript. -
13
roblox-ts
A TypeScript-to-Luau Compiler for Roblox
roblox-ts is an attempt to bridge the abilities of TypeScript to work in a Roblox environment. We break down your code into an abstract syntax tree and emit functionally similar structures in Luau so that the code behaves the same. -
14
Matter AI
Matter AI is open-source AI Code Reviewer Agent
Matter AI is an AI-powered platform designed to enhance productivity through automated content generation, data analysis, and decision support. It leverages machine learning models to process text, analyze patterns, and generate insights, making it suitable for businesses looking to optimize data-driven decision-making. Matter AI integrates with various data sources and provides customizable AI workflows tailored to different industries. -
15
Constructs
Define composable configuration models through code
Constructs are classes that define a "piece of system state". Constructs can be composed together to form higher-level building blocks which represent a more complex state. Constructs are often used to represent the desired state of cloud applications. For example, in the AWS CDK, which is used to define the desired state for AWS infrastructure using CloudFormation, the lowest-level construct represents a resource definition in a CloudFormation template. These resources are composed to... -
16
NetPad
A cross-platform C# editor and playground
A cross-platform C# editor and playground. NetPad is a C# playground that lets you run C# code instantly, without the hassle of creating and managing projects. Open NetPad, start coding, hit Run, and see your output immediately. It's that simple. Quickly prototype and test code snippets before incorporating them into your projects. Visualize data interactively for better insights and analysis. Query databases using LINQ or SQL effortlessly. -
17
eslint-plugin-sonarjs
SonarJS rules for ESLint
SonarJS rules for ESLint to detect bugs and suspicious patterns in your code. Rules in this category aim to find places in code that have a high chance of being bugs, i.e. don't work as intended. All branches in a conditional structure should not have exactly the same implementation. Collection elements should not be replaced unconditionally. Empty collections should not be accessed or iterated. Function calls should not pass extra arguments. Related "if/else if" statements should not have... -
18
Positron
Positron, a next-generation data science IDE
Positron is a next-generation integrated development environment (IDE) created by Posit PBC (formerly RStudio Inc) specifically tailored for data science workflows in Python, R, and multi-language ecosystems. It aims to unify exploratory data analysis, production code, and data-app authoring in a single environment so that data scientists move from “question → insight → application” without switching tools. Built on the open-source Code-OSS foundation, Positron provides a familiar coding experience along with specialized panes and tooling for variable inspection, data-frame viewing, plotting previews, and interactive consoles designed for analytical work. ... -
19
Vite
Next generation frontend tooling. It's fast!
...A dev server that serves your source files over native ES modules, with rich built-in features and astonishingly fast Hot Module Replacement (HMR). A build command that bundles your code with Rollup, pre-configured to output highly optimized static assets for production. -
20
Briefer
Dashboards and notebooks in a single place
Briefer is an open-source collaborative data platform that brings notebooks, dashboards, and interactive data apps into a unified workspace that combines the flexibility of code with the simplicity of visual exploration. It’s designed so technical users can write Markdown, SQL, and Python side by side for data analysis, visualization, and reporting, while non-technical viewers can interact with results through inputs, dropdowns, and date pickers without writing any code. Users work in a Notion-style interface where they can build, organize, and share pages that contain executable code blocks, charts, text explanations, and interactive elements within the same document, enabling rich data storytelling and reproducible analytics. ... -
21
react-rollup-boilerplate
Boilerplate for creating React component libraries
This boilerplate is tailored for creating React component libraries, utilizing Rollup.js to bundle components into ES Modules and CommonJS formats. It incorporates TypeScript for type safety and Storybook for interactive component development, streamlining the process of building and distributing reusable React components. -
22
next international
Type-safe internationalization (i18n) for Next.js
Type-safe internationalization (i18n) for Next.js. -
23
TOTVS Developer Studio para VSCode
Totvs Developer Studio for vscode
The TOTVS Developer Studio for VS Code extension provides a development suite for the Protheus/Logix ecosystem. Using the LSP ( Language Server Protocol ) and DAP ( Debug Adapter Protocol ) communication protocols , both widely used and extensible to other IDEs on the market, such as Atom, Visual Studio, Eclipse, Eclipse Theia, Vim and Emacs. When starting VS Code with the TDS-VSCode extension installed, open (or create) the main folder that contains (or will contain) your source and... -
24
Fork TS Checker Webpack Plugin
Webpack plugin that runs typescript type checker on a separate process
Webpack plugin that runs TypeScript type checker on a separate process. Speeds up TypeScript type checking (by moving it to a separate process). Supports modern TypeScript features like project references and incremental mode. Supports Vue Single File Component. Displays nice error messages with the code frame formatted. This plugin requires Node.js >=12.13.0+, Webpack ^5.11.0, TypeScript ^3.6.0. It's very important to be aware that this plugin uses TypeScript's, not webpack's modules... -
25
eslint-plugin-testing-library
ESLint plugin to follow best practices and anticipate common mistakes
ESLint plugin to follow best practices and anticipate common mistakes when writing tests with Testing Library. You can find detailed guides for migrating eslint-plugin-testing-library in the migration guide docs. Add testing-library to the plugins section of your .eslintrc configuration file. You can omit the eslint-plugin- prefix. With the default setup mentioned before, eslint-plugin-testing-library will be run against your whole codebase. You can run this plugin only against your tests...
