478 Open source projects that are alternatives of or similar to Phpstan Deprecation Rules

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

[DEPRECATED] Find Python web-app bugs delightfully fast, without changing your workflow. 🍱

Analyses and reports testability issues of a php codebase

A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.

Docker image that provides static analysis tools for PHP

Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.

A project that uses Binary Ninja and GRAKN.AI to perform static analysis on binary files with the goal of identifying bugs in software.

ShellCheck, a static analysis tool for shell scripts

Шаблон кросплатформенного CMake-проекта для языка C++ 🇬🇧 Modern CMake crossplatform project template for C++

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

Style-preserving Lua parser in Rust

H(igh) A(ssurance) ROS - Static analysis of ROS application code.

Awesome autocompletion, static analysis and refactoring library for python

Analyzes Elm projects, to help find mistakes before your users find them.

ESLint Shareable Config for JSX support in JavaScript Standard Style

CSS complexity linter

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Setup scripts for my Malware Analysis VMs

A Github Action for ShellCheck

A LLVM-based static analysis framework.

Language server for PHP, with powerful static analysis and type inference.

Kubernetes RBAC static Analysis & visualisation tool

Wanna get DRY? Static analysis tool for detecting repeat code.

Emacs Lisp Static Analyzer

GCC plugin that embeds CPython inside the compiler

🐳 📡 Docker way of running SonarQube + any DB

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

PhpCodeAnalyzer scans codebase and analyzes which non-built-in php extensions used

🔐 A code style linter for Elixir

ESLint plugin for Scoped CSS in Vue.js

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

F# analyzer that provides embedded SQL syntax analysis, type-checking for parameters and result sets and nullable column detection when writing queries using Npgsql.FSharp.

ESLint configurations and additional rules for me

Sonar plugin to analyze ESQL-sourcecode of IBM Integration Bus projects

👆 Website for JavaScript Standard Style (@standard)

A parser and source code analyzer for PL/SQL and Oracle SQL.

Rubocop extension for enforcing graphql-ruby best practices

A community-driven list of awesome linters.

An R package for static analysis of R code.

Functional, composable, asynchronous, type-safe Python.

Simple and powerful standalone project for clang-based tools using libtooling (e.g. refactoring, auto-completion, etc.)

DEPRECATED -- DevSkim plugin for Sublime Text 3.

Configuration files that allow cppcheck to provide better static analysis results

A free and open-source SonarQube plugin for static code analysis of Scala projects.

`mllint` is a command-line utility to evaluate the technical quality of Python Machine Learning (ML) projects by means of static analysis of the project's repository.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Defund the Police.

Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.

🐺 Malware analysis platform

Converts JavaScript to TypeScript and TypeScript to better TypeScript.

Binary Analysis Platform

SonarQube Java Properties Analyzer

Flycheck integration for Elsa---Emacs lisp static analyzer

No description or website provided.

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

This repo demonstrates how to work on CI/CD for Mobile Apps 📱 using Github Actions 💊 + Firebase Distribution 🎉

Program analysis playground for a simple, imperative language

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

Linting tool for CloudFormation templates