Havuz

The Polyspace Agentic Toolkit brings trusted Polyspace capabilities to AI agents.

Relational codebase compiler and spec-driven containment engine for AI coding agents. Compiles polyglot repos (Rust, Python, TS, Go, C/C++,

Auditions Ruby scripts, gems, Rack apps, and Rails applications for the ability to run under Ractors: static analysis of Ractor-isolation vi

EKOS is an AI-native platform that continuously reconstructs, compiles, stores and serves enterprise knowledge.

Evidence-backed TS/JS repo structure lens for Claude Code

The testing standard for MCP servers. Lint (14 rules), test, and fuzz over real stdio/SSE/HTTP transport. 18 assertion types in YAML. Found

Static analysis engine for Python web-applications

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Logic-first AI code review via semi-formal execution tracing (Premises → Trace → Divergence → Trigger → Remedy). Catches behavioral bugs, ty

Agent-assisted vulnerability research across Rust, Android APKs, and AI agents: independent discovery, skeptical triage, verification, and p

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc

Permanent code intelligence layer. Learns what matters, expires what changed, proves what existed. Content-addressed graph with Merkle proof

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server,

Your SvelteKit app's code health, checked before it ships. Statically, no browser — SEO, Performance, Correctness, Security, Architecture, A

🎵 Grade your vibe-coded project. One command, instant letter grade across security, quality, dependencies, and testing.

Continuously refine your project’s engineering philosophy — and keep AI coding agents honest with evidence-backed completion.

Dead code detector for Dart and Flutter. Finds declarations that are never referenced — classes, functions, methods, fields, constants, enum

A terminal UI for Yocto/OpenEmbedded static analysis, style checks, layer validation, patch auditing and license compliance.

Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX

MCP server for deep semantic analysis of Scala via SemanticDB — exact find-usages, class hierarchies, implicit resolution & call paths for A

Turn your Ruby codebase into a galaxy

Which of your Home Assistant custom integrations stop working, and in which future release. Daily crawl of every HACS integration for deprec

Additional linting rules for Rust projects

a cli based static python code reviewer

Live code graph that fuses static analysis (tree-sitter) with OpenTelemetry runtime traces, queried over MCP so AI coding agents get real fu

Static flow analyzer for PHP applications — trace routes through messages, services, database effects and external HTTP calls without runnin

Most tools give AI access to the codebase. Archon gives AI access to the change itself. Structural Analysis tool intergrated for AI planning

An architectural audit where a finding is admissible only once its cost is measured from git history. A doctrine for coding agents plus a st

Evidence-grounded AI agent for Java code repair with LLM-guided patches and human-in-the-loop review.

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.

Universal zero-dependency linter and formatter. One pure-Rust binary (poly) that lints and formats ~30 languages in-process — ruff, oxc, bio

🔍 AI-powered automated code review tool that analyzes syntax, performance bottlenecks, and security flaws in pull requests.

AI pull-request reviewer: hybrid RAG + a code graph + Claude Code/Codex. Whole-repo context, inline GitHub comments grounded on exact code.

Living docs for you and your AI assistant. VibeSequence reads your code and draws every route, command and handler as a zoomable sequence d

PHPStan extension for Yii2

An AI-driven tool designed to automate the detection of security vulnerabilities in Java source code.

LintEval: Benchmarking LLMs on Linter-Guided File Refactoring (EMNLP 2026 Findings) — multi-language benchmark for linter-guided refactoring

Delphi-native, MIT-licensed RAG + linter for Delphi/Pascal source code. Symbol-exact + fuzzy + tree-sitter lint. Pure Delphi at runtime.

Agentic code review with structural graph intelligence — PR gate + branch stewardship. Self-hosted. Apache-2.0.

Laravel compatibility preset and runner for Mago static analysis

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard

See the full type-inference chain of any value in PHPStan, not just a single snapshot.

Defensive binary analysis and reverse-engineering toolkit for PE, ELF, and Mach-O executables with local web reporting.

Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness.

Measure and stop structural erosion in AI-written TypeScript. Slop Check finds the mess, the Deslop tools clean it. Based on SlopCodeBench (

GSC — verified remediation engine: SAST that proves exploits (PoC), verifies fixes (Proof-of-Fix), and self-heals CI. Apache 2.0 + Commercia

A Gradle plugin for auditing Kotlin Multiplatform iOS export surfaces and measuring linked binary size. Finds Objective-C declarations for r