Havuz

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compile

Kotlin formatter and linter in Rust, drop-in ktfmt and ktlint (2.0 and 1.8) replacements with identical output.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Architecture-aware code search, dependency graphs, and impact analysis for Python, TypeScript, Rust, C#, Java, Go, Ruby, Rails, Free Pascal,

A statistical code analyzer built from your repository's history.

Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security

Architectural linting for Swift developers and coding agents

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage

graf is graphify, rebuilt properly in rust: 1000x faster search, 89x faster updates, and one native binary.

Static analysis for Sierra adventure games: finds softlocks by abstract interpretation of decompiled SCI scripts, derives and verifies guard

Scan your ROS2 workspace and visualize node topology as an interactive graph. No running system needed.

Keep Go packages flat without losing their internal boundaries: file-level private and package scopes for declarations, methods and struct f

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Local static analysis and baseline-governed CI checks for coding-agent instructions: AGENTS.md, CLAUDE.md, Cursor, Copilot, and Gemini.

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

Research-first architecture engine for Python, TS, Go and Rust. Mines GitHub Issues for real production failures before scaffolding, then au

Контроль качества 1С-разработки для Claude Code: стандарты, принципы ООП и паттерны, XML метаданных, блокирующие гейты и проверяемый след пр

Local-first static analysis for EF Core: finds performance and correctness problems (SaveChanges in loops, unbounded queries, cartesian Incl

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Audits the .claude/ ecosystem — skills, commands, hooks, agents, settings, plugins, memory — for dead references, weak triggers, token bloat

Cache-line false sharing linter for Rust structs

AI code review pipeline — review, auto-fix, test generation & HTML report in one command. Zero dependencies, 6 AI providers (OpenAI/DeepSeek

Write oxlint custom lint rules with Effect v4

Static source analysis that generates deterministic Claude Code documentation ecosystems — no LLM guessing, only code-confirmed facts.

Static reproducibility checks, experiment replay, and verification for ML pipelines.

A CLI that extracts the useful structure from source files: signatures, imports, types, variables, comments, and Markdown sections.

Comprehensive multi-agent code review for Claude Code

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Deterministic failure-mode scanner for TypeScript. Catches missing error handling around npm packages like Axios, Stripe, and Prisma before

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

The Hale programming language: general-purpose, native and memory-safe, from a five-line script to a dynamic distributed system. Less langua

Open-source design-system drift scanner — audit tokens, components, a11y & docs; score adoption; hand fixes to your coding agent. Local-firs

Review code changes by what they do, and learn the concepts behind them.

Specs your AI agent can't ignore. A deterministic compiler that turns your rules into checks: no AI inside, same input, same verdict. Rust ·

Briev: a contract-enforced programming language and compiler. Verified state transitions, LLVM backend, reactive execution, multi-target cod

Detect and patch vulnerabilities in AI-generated Python code — VS Code extension

Generate OpenAPI 3.1 specs from Go source code via static analysis — zero annotations, automatic framework detection

Interactive static pattern discovery tool to locate structures from frequent patterns

A codebase scanner that helps you not run malicous code

Get your repo ready for AI.

Solana's SOL-0XX security standard — bug-class rules distilled from $514M of real exploits, firing as you code in every AI tool, editor & CI

phpcpd-next is a token-based copy/paste (clone) detector for PHP 8.4+, a modernized, openly-licensed successor to Sebastian Bergmann's phpc

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, wi

Hermes Agent-focused architecture and runtime health checks

AI-powered desktop app for migrating Python projects to Rust. Supports multiple LLM providers (OpenAI, Anthropic, Ollama), includes 300+ lib

Agent dashboard runs reliability scans, skills, and network access probes.

A PHPStan extension for analysis of Laravel applications and packages.

Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.

Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge. Cy

Checks coding agents' edits as they work by enforcing mechanical guardrails for clean code.