Havuz

手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.

TypeScript toolkit for Windows x64 native systems programming, memory manipulation, and process instrumentation.

fallow, TypeScript ve JavaScript codebase'lerini kullanılmayan kod, bağımlılık döngüleri, duplication ve mimari sorunlar açısından analiz eden bir CLI aracıdır.

Neden yükseliyor · 194 günlük repo yaşına karşı 4.903 yıldız ve son 28 günde 437 commit dikkat çekici bir ilgi ve geliştirme temposuna işaret ediyor. Ancak bu dönemde yalnızca 3 farklı yazar bulunması, aktivitenin dar bir katkıcı grubunda yoğunlaştığını gösteriyor; yükselişi yalnızca yıldızlarla açıklamak doğru olmaz.

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the

Kotlin formatter and linter in Rust, drop-in ktfmt and ktlint (2.0 and 1.8) replacements with identical output.

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

perch, Jev ve TypeSafe API anahtarıyla kodu tarayan ve doğal dille tanımlanmış kurallara göre olası sorunları raporlayan bir CLI aracıdır.

Neden yükseliyor · 12 günlük yaşına kıyasla 226 yıldız ve son 28 günde 114 commit dikkat çekici erken ilgi ve geliştirme temposuna işaret ediyor. Ancak yalnızca 3 farklı yazar var; bu nedenle ilginin sebebini veya geniş kullanıcı benimsemesini bu verilerden doğrulamak mümkün değil.

Language-agnostic code navigation CLI powered by tree-sitter

Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

Benzi is code intelligence infrastructure for AI models. It compiles your codebase into a resolved, queryable map of calls, data flow, contr

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Deterministic textlint rules and CLI for catching prose slop in English Markdown.

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.

Architectural linting for Swift developers and coding agents

Deterministic tree-sitter + SQLite/FTS5 code knowledge graph for coding agents and developers: symbols, calls and dependencies over a CLI, a

Multi-language cognitive complexity linter, as a single static binary

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

seiso, proje dokümantasyonundaki Markdown dosyalarını tanımlı bir yazım ve yapı kuralına göre denetleyen bir CLI linter'dır.

Neden yükseliyor · AI tarafından üretilen dokümantasyonun doğruluğu ve coding agents için güvenilir bağlam ihtiyacı güncel bir sorun. Repo bir günlükken 74 yıldıza ulaşmış; bu ilk ilgiyi gösterir, ancak kalite veya benimseme kanıtı değildir. Son 28 günlük commit ve farklı yazar verisi ölçülmemiş.

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, imp

Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compile

A statistical code analyzer built from your repository's history.

Open-source design-system drift scanner — audit tokens, components, a11y & docs; score adoption; hand fixes to your coding agent. Local-firs

Review code changes by what they do, and learn the concepts behind them.

Checks coding agents' edits as they work by enforcing mechanical guardrails for clean code.

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local

Security testing that runs inside the coding agent you already use. Source-available, not open source.

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security a

The 10-second codebase tour. Understand any repo in one command.

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

Static analysis and health checks for dbt projects.

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

Research-first architecture engine for Python, TS, Go and Rust. Mines GitHub Issues for real production failures before scaffolding, then au

AI code review pipeline — review, auto-fix, test generation & HTML report in one command. Zero dependencies, 6 AI providers (OpenAI/DeepSeek

A CLI that extracts the useful structure from source files: signatures, imports, types, variables, comments, and Markdown sections.

Deterministic failure-mode scanner for TypeScript. Catches missing error handling around npm packages like Axios, Stripe, and Prisma before

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

The modern, intelligent codebase aware linter for environment correctness

Instantly understand any codebase. One command, zero API keys, works fully offline. Auto-detects 20+ project types, maps architecture, and e

Your AI works the night shift — read-only reviews of your projects while you're busy, one digest every morning.

A tool that replaces everything that can be deterministic in repository work: search, symbols, callers, task scope, history, review and Git

Compare OpenAPI specs and find potential affected JS, TS, and Python callers. Offline, zero runtime dependencies, with a one-command demo.

Portable, always-fresh docs for agents and humans. A Surface hub is a conformant OKF concept; Surface adds the freshness OKF leaves out - it

Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server,