Havuz

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang

An architectural audit where a finding is admissible only once its cost is measured from git history. A doctrine for coding agents plus a st

Multi-language cognitive complexity linter, as a single static binary

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Specs your AI agent can't ignore. A deterministic compiler that turns your rules into checks: no AI inside, same input, same verdict. Rust ·

Measures how much code AI coding agents add, from patches benchmarks already publish

Compare OpenAPI specs and find potential affected JS, TS, and Python callers. Offline, zero runtime dependencies, with a one-command demo.

🇺🇦🇵🇱 A static analysis tool for OpenTelemetry Collector configurations. Built on OPA/Rego, it validates your pipelines, receivers, processor

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessmen

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

phpcpd-next is a token-based copy/paste (clone) detector for PHP 8.4+, a modernized, openly-licensed successor to Sebastian Bergmann's phpc

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostic

Offline WebAssembly component inspection and capability-policy toolkit - decode .wasm binaries, classify host capabilities, gate against exp

Audits the .claude/ ecosystem — skills, commands, hooks, agents, settings, plugins, memory — for dead references, weak triggers, token bloat

Static flow analyzer for PHP applications — trace routes through messages, services, database effects and external HTTP calls without runnin

零依赖的本地 APK/AAR/DEX 结构索引 + MCP Server。17 个工具，为 Xposed 模块开发提供静态反查。

A static analysis linter for Stellar Soroban smart contracts to catch input-independent resource cost anti-patterns before deployment.

Open-source design-system drift scanner — audit tokens, components, a11y & docs; score adoption; hand fixes to your coding agent. Local-firs

Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use

Your AI works the night shift — read-only reviews of your projects while you're busy, one digest every morning.

Checks coding agents' edits as they work by enforcing mechanical guardrails for clean code.

Research-first architecture engine for Python, TS, Go and Rust. Mines GitHub Issues for real production failures before scaffolding, then au

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

A statistical code analyzer built from your repository's history.

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage

Measure and stop structural erosion in AI-written TypeScript. Slop Check finds the mess, the Deslop tools clean it. Based on SlopCodeBench (

LintEval: Benchmarking LLMs on Linter-Guided File Refactoring (EMNLP 2026 Findings) — multi-language benchmark for linter-guided refactoring

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Cache-line false sharing linter for Rust structs

Rust Based Multi-language Static Analyser & Developer tools for the AI age.

Auditions Ruby scripts, gems, Rack apps, and Rails applications for the ability to run under Ractors: static analysis of Ractor-isolation vi

A Gradle plugin for auditing Kotlin Multiplatform iOS export surfaces and measuring linked binary size. Finds Objective-C declarations for r

Comprehensive multi-agent code review for Claude Code

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Which of your Home Assistant custom integrations stop working, and in which future release. Daily crawl of every HACS integration for deprec

Scan your ROS2 workspace and visualize node topology as an interactive graph. No running system needed.

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

An eraser against LLM-induced code & document entropy. Support if you like it!

The Hale programming language: general-purpose, native and memory-safe, from a five-line script to a dynamic distributed system. Less langua

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

A fast experimental PHP static analyzer written in Rust, a port of Psalm

Solana's SOL-0XX security standard — bug-class rules distilled from $514M of real exploits, firing as you code in every AI tool, editor & CI

Multi-language static analysis for agents, editors, and large repositories.

Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness.

The modern, intelligent codebase aware linter for environment correctness

FSharp refactoring tool - The tool clarifies the (agent-generated or old) code's intent, reduces non-alphanumeric noise, and uses built-in .

EKOS is an AI-native platform that continuously reconstructs, compiles, stores and serves enterprise knowledge.

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and