Static analysis

12 projects

Clippy covers everyday linting for Rust, and this category goes further. Verus lets you write specifications and proofs alongside Rust code and checks them with an SMT solver, so you can prove properties such as the absence of overflow or that a data structure keeps its invariants. Creusot takes a similar deductive verification approach using the Why3 platform. MIRAI is an abstract interpreter for Rust's MIR that looks for panics and violated assertions.

These tools take real effort to adopt, so they fit best on small, critical components. A lighter option is static_assertions, which checks constants, type sizes and trait implementations at compile time with no extra tooling. Clippy itself is worth tuning too: enabling the pedantic group or individual restriction lints such as unwrap_used catches many issues before you need heavier tools.

Several entries are not specific to Rust code. zizmor audits GitHub Actions workflows for security problems such as template injection and overly broad permissions, and jscpd detects copy-pasted code across many languages. cargo-coupling measures how tightly the modules in a Rust project depend on each other.

cargo-couplingby nwiizo

A Rust coupling analysis tool using Vlad Khononov's "Balancing Coupling in Software Design" framework

cargo-coupling0.4.0398/90d updated today

114

creusotby creusot-rs

A deductive verifier for Rust that proves absence of panics, overflows, and assertion failures by translating code to the Why3 verification platform

v0.14.0updated today

1.9k

dupehoundby Rafaelpta

Duplicate-code detector that fingerprints function bodies (winnowing), so copies survive renaming. Repo slop score, duplication history chart, and a CI gate that points to the original function to reuse. Supports Rust and 11 other languages.

dupehound0.1.21.8k/90d updated 29d ago

97

jscpdby kucherenko

Copy/paste detector for source code that finds duplicated blocks across 220+ file formats

jscpd5.4.213.2k/90d updated today

6.4k

MIRAIby endorlabs

An abstract interpreter operating on Rust's mid-level intermediate representation (MIR)

v1.1.12updated 4mo ago

229

repopilotby MykytaStel

Local, deterministic review of Git changes, including AI-agent edits: weakened tests and checks, callers broken by removed APIs, and risky boundary changes; CLI, MCP server and agent hooks

repopilot0.25.01.8k/90d updated 1d ago

24

RAPxby safer-rust

A platform that helps Rust programmers develop and use advanced static analysis tools beyond those provided by the rustc compiler.

rapx0.7.61920/90d updated today

223

static_assertions

Compile-time assertions to ensure that invariants are met

static_assertions1.1.0127m/90d

code-busterby tool-bunker

A deterministic offline static analyzer for repository structure, dependencies, dead code, duplication, complexity, security, and maintainability across 18 languages.

code-buster0.11.022/90d updated 2d ago

79

linecheckby tupe12334

Enforces per-file line-count limits with per-glob warn/error thresholds and CI-friendly exit codes, so oversized files fail the build

linecheck1.2.12.3k/90d updated 14d ago

1

verusby verus-lang

Verified Rust for low-level systems code

verus0.0.0100/90d updated today

3.4k

zizmorby zizmorcore

Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.

zizmor1.31.147.2k/90d updated today

6.7k

Built on the open rust-unofficial/awesome-rust list by its contributors, licensed CC0 1.0. Crate Atlas is an independent project, not affiliated with the list's maintainers.

About Synced Oct 21, 2026

© 2026 Crate Atlas

About this site
Esc

Type to search every entry. ↑↓ to move, Enter to open.