Open-source projects tagged “static-analysis”

Hermes Agent skills that have the agent write its own analytical prompts, then report both findings and blind spots for a file or artifact.

Command-line tool that decompiles Android APK files with jadx and scans them for URIs, endpoints and hardcoded secrets.

Self-hosted code quality and security platform that finds bugs, vulnerabilities and maintainability issues through static analysis.

A fast Go-based Dockerfile linter that flags common issues, anti-patterns and security risks with 60+ rules and a 0-100 quality score.

A CLI that extracts a website's, repo's, or local project's design system into a folder of files Claude Code can read to build matching UI.

Codebase intelligence that indexes code, git history, tests and docs locally, then answers call graph, blast radius, dead code and health questions via MCP for agents.

A local code knowledge graph that gives AI coding tools precise review context over MCP and a CLI.

An MCP server that lets AI agents reverse engineer native binaries, JavaScript/Electron apps, .NET assemblies, websites and more, with evidence for each finding.