Havuz

Auditions Ruby scripts, gems, Rack apps, and Rails applications for the ability to run under Ractors: static analysis of Ractor-isolation vi

Evidence-backed TS/JS repo structure lens for Claude Code

Static analysis engine for Python web-applications

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Logic-first AI code review via semi-formal execution tracing (Premises → Trace → Divergence → Trigger → Remedy). Catches behavioral bugs, ty

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server,

Your SvelteKit app's code health, checked before it ships. Statically, no browser — SEO, Performance, Correctness, Security, Architecture, A

🎵 Grade your vibe-coded project. One command, instant letter grade across security, quality, dependencies, and testing.

Prevent cross-repo architectural breakage before merge. Architecture knowledge graph from static analysis, blast radius in CI, MCP server fo

Continuously refine your project’s engineering philosophy — and keep AI coding agents honest with evidence-backed completion.

A terminal UI for Yocto/OpenEmbedded static analysis, style checks, layer validation, patch auditing and license compliance.

Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX

MCP server for deep semantic analysis of Scala via SemanticDB — exact find-usages, class hierarchies, implicit resolution & call paths for A

Turn your Ruby codebase into a galaxy

Which of your Home Assistant custom integrations stop working, and in which future release. Daily crawl of every HACS integration for deprec

Additional linting rules for Rust projects

a cli based static python code reviewer

Live code graph that fuses static analysis (tree-sitter) with OpenTelemetry runtime traces, queried over MCP so AI coding agents get real fu

Static flow analyzer for PHP applications — trace routes through messages, services, database effects and external HTTP calls without runnin

Most tools give AI access to the codebase. Archon gives AI access to the change itself. Structural Analysis tool intergrated for AI planning

An eraser against LLM-induced code & document entropy. Support if you like it!

An architectural audit where a finding is admissible only once its cost is measured from git history. A doctrine for coding agents plus a st

Evidence-grounded AI agent for Java code repair with LLM-guided patches and human-in-the-loop review.

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.

Universal zero-dependency linter and formatter. One pure-Rust binary (poly) that lints and formats ~30 languages in-process — ruff, oxc, bio

🔍 AI-powered automated code review tool that analyzes syntax, performance bottlenecks, and security flaws in pull requests.

AI pull-request reviewer: hybrid RAG + a code graph + Claude Code/Codex. Whole-repo context, inline GitHub comments grounded on exact code.

Living docs for you and your AI assistant. VibeSequence reads your code and draws every route, command and handler as a zoomable sequence d

PHPStan extension for Yii2

An AI-driven tool designed to automate the detection of security vulnerabilities in Java source code.

Nuitka Assembly analyzer (as well as PyInstaller and other packagers) and native exe-files for extracting metadata, strings, modules, and st

LintEval: Benchmarking LLMs on Linter-Guided File Refactoring (EMNLP 2026 Findings) — multi-language benchmark for linter-guided refactoring

Laravel compatibility preset and runner for Mago static analysis

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard

See the full type-inference chain of any value in PHPStan, not just a single snapshot.

Defensive binary analysis and reverse-engineering toolkit for PE, ELF, and Mach-O executables with local web reporting.

Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness.

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

A Gradle plugin for auditing Kotlin Multiplatform iOS export surfaces and measuring linked binary size. Finds Objective-C declarations for r

Static analysis for Redis Lua scripts — cluster-unsafe key access, unbounded loops, sandbox violations.

A live, graph-verified map of your codebase for AI coding agents — real call graphs, compiler-verified edges, and hard safety gates on the w

Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized

fallow for Neovim — see your unused code, dups, and health in a native split

AI Powered Reverse Engineering Tool

Paste a URL, find out something true about the site. Three URL-only readings on one page: Slopmeter scores how much of it is still the templ

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.