MIRAI

zizmorby zizmorcore

Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.

zizmor1.31.147.2k/90d updated 1d ago

jscpdby kucherenko

Copy/paste detector for source code that finds duplicated blocks across 220+ file formats

jscpd5.4.213.2k/90d updated today

verusby verus-lang

Verified Rust for low-level systems code

verus0.0.0100/90d updated today

creusotby creusot-rs

A deductive verifier for Rust that proves absence of panics, overflows, and assertion failures by translating code to the Why3 verification platform

v0.14.0updated today

RAPxby safer-rust

A platform that helps Rust programmers develop and use advanced static analysis tools beyond those provided by the rustc compiler.

rapx0.7.61920/90d updated today

cargo-couplingby nwiizo

A Rust coupling analysis tool using Vlad Khononov's "Balancing Coupling in Software Design" framework

cargo-coupling0.4.0398/90d updated today

dupehoundby Rafaelpta

Duplicate-code detector that fingerprints function bodies (winnowing), so copies survive renaming. Repo slop score, duplication history chart, and a CI gate that points to the original function to reuse. Supports Rust and 11 other languages.

dupehound0.1.21.8k/90d updated 29d ago

code-busterby tool-bunker

A deterministic offline static analyzer for repository structure, dependencies, dead code, duplication, complexity, security, and maintainability across 18 languages.

code-buster0.11.022/90d updated 2d ago