Havuz

fallow, TypeScript ve JavaScript codebase'lerini kullanılmayan kod, bağımlılık döngüleri, duplication ve mimari sorunlar açısından analiz eden bir CLI aracıdır.

Neden yükseliyor · 194 günlük repo yaşına karşı 4.903 yıldız ve son 28 günde 437 commit dikkat çekici bir ilgi ve geliştirme temposuna işaret ediyor. Ancak bu dönemde yalnızca 3 farklı yazar bulunması, aktivitenin dar bir katkıcı grubunda yoğunlaştığını gösteriyor; yükselişi yalnızca yıldızlarla açıklamak doğru olmaz.

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

README-first, evidence-backed analysis for understanding public GitHub repositories before adoption.

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks

Normify · DSH 插件：把项目架构写成归一化的分形模块树，三层校验（写时 / 校验 / 冻结回执）、30 个 normify_* 工具 + normify-gen 技能，一键渲染单文件交互式架构图；支持伴随式开发（change_open → brief → check

Evidence-driven Java security review workbench

Deterministic textlint rules and CLI for catching prose slop in English Markdown.

Agent dashboard runs reliability scans, skills, and network access probes.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

Cheaper and better Greptile alternative runs on your own github actions.

Static reverse engineering of untrusted files with verifiable, byte-anchored evidence. Open tools (Ghidra, JADX, LIEF, YARA-X, Babel) in loc

Recommend AI coding harness changes from repository context and coding signals, then distribute approved rules, skills, hooks and agents to

A codebase scanner that helps you not run malicous code

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compile

Help your agents find the smoking gun they're looking for. Optimization evidence for agents: find complexity hotspots.

Agent skills for fallow. They teach coding agents (Claude Code, Codex, Cursor, and others) to check health, complexity, duplication, archite

Turn a public GitHub repository into an interactive software architecture graph. Static analysis, flow tracing, analytics. MIT licensed.

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Agent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures

The 10-second codebase tour. Understand any repo in one command.

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Architecture-aware code search, dependency graphs, and impact analysis for Python, TypeScript, Rust, C#, Java, Go, Ruby, Rails, Free Pascal,

Browser-based, syntax-aware code comment stripper that removes comments from source code while preserving strings, URLs, template literals,

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang

Multi-language cognitive complexity linter, as a single static binary

Compare OpenAPI specs and find potential affected JS, TS, and Python callers. Offline, zero runtime dependencies, with a one-command demo.

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

Offline WebAssembly component inspection and capability-policy toolkit - decode .wasm binaries, classify host capabilities, gate against exp

Open-source design-system drift scanner — audit tokens, components, a11y & docs; score adoption; hand fixes to your coding agent. Local-firs

Checks coding agents' edits as they work by enforcing mechanical guardrails for clean code.

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Measure and stop structural erosion in AI-written TypeScript. Slop Check finds the mess, the Deslop tools clean it. Based on SlopCodeBench (

Rust Based Multi-language Static Analyser & Developer tools for the AI age.

A CLI that extracts the useful structure from source files: signatures, imports, types, variables, comments, and Markdown sections.

Paste a URL, find out something true about the site. Three URL-only readings on one page: Slopmeter scores how much of it is still the templ

Write oxlint custom lint rules with Effect v4

AI code review pipeline — review, auto-fix, test generation & HTML report in one command. Zero dependencies, 6 AI providers (OpenAI/DeepSeek

Deterministic failure-mode scanner for TypeScript. Catches missing error handling around npm packages like Axios, Stripe, and Prisma before

Gradual effect, contract, async-safety, and temporal checking for existing TypeScript.

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

🔥 AI agent that ports CUDA code to AMD ROCm using local LLMs — FastAPI + React + Ollama | Live: rocmporter-agent.vercel.app

Your SvelteKit app's code health, checked before it ships. Statically, no browser — SEO, Performance, Correctness, Security, Architecture, A

Agentic code review with structural graph intelligence — PR gate + branch stewardship. Self-hosted. Apache-2.0.

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard