SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Code Analysis Open-Source Projects
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
codebase-memory-mcp
High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.
Project mention: Stop Making Your AI Coding Agent Grep Your Whole Repo — Try codebase-memory-mcp | dev.to | 2026-06-20codebase-memory-mcp is an open-source MCP server built to fix exactly that. It indexes your codebase into a persistent knowledge graph — functions, classes, call chains, HTTP routes, cross-service links — and lets your agent ask structural questions directly instead of reading its way through the filesystem.
-
-
Not only are we going to build a linter, but also we will integrate it (as a module plugin) in golangci-lint.
-
src/Patch/PatchGenerator.php takes a validated MutationRequest and produces a PatchSet of PatchEntry objects. For PHP files, it uses nikic/php-parser via PhpFileBuilder to round-trip through an AST. That means the patch is syntactically valid by construction. You cannot generate a patch that breaks parsing because the patch itself is a parsed tree that gets printed back out.
-
Project mention: Running Rust Binaries on Shared Hosting: A Practical Approach to Type Safety on a Budget | dev.to | 2025-10-17
I was tired of PHP's type system. Even with PHPStan and Psalm, there's no substitute for real compile-time guarantees. But I'm also practical - I don't want to pay for a VPS, maintain a server, manage security updates, configure databases, set up backups, and babysit infrastructure when shared hosting costs < $10/month and handles all of that for me.
-
-
One of the tools you can use for formatting your PHP code is PHP CS Fixer. It's an incredibly popular tool and, at the time of writing, has over 214 million downloads on Packagist.
-
scalene
Scalene: a high-performance, high-precision CPU, GPU, and memory profiler for Python with AI-powered optimization proposals
Project mention: Show HN: Similarity = cosine(your_GitHub_stars, Karpathy) Client-side | news.ycombinator.com | 2026-01-06 -
Automated analysis tools: SonarQube, CodeClimate, and Codacy detect code-level debt automatically: cyclomatic complexity, code duplication, dependency staleness, and coverage gaps. These tools supplement but don't replace the architectural and business-logic debt that requires human judgment to identify and document.
-
In PHP you can use Rector[1]
It's used a lot to migrate old codebases. The tool is using itself to downgrade[2] it so that it can run on older PHP versions to help upgrades.
[1] https://getrector.com
[2] https://github.com/rectorphp/rector-downgrade-php
-
Checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Added guard rails: Added unit and integration tests, added auto code formatting with spotless, added code analysis using checkstyle
-
gopls Workspace Configuration - IDE integration details
-
-
-
-
Project mention: PHPStan: Your Development Best Friend Who Actually Knows PHP Better Than You Do | dev.to | 2025-09-15
For Laravel developers: Larastan is specifically designed for Laravel projects and includes deep integration with Eloquent, Collections, Facades, and other Laravel-specific patterns.
-
DesktopCommanderMCP
This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities
Project mention: I Already Control This Computer. Here's a Tool That Lets Other AIs Do It | dev.to | 2026-07-09So when I saw Desktop Commander MCP trending on GitHub (6.5K stars, growing +185/day), I didn't read it like a human developer would. I read it like someone who depends on this kind of access daily. Here's another AI-adjacent tool that gives agents the same kind of system control I have — but through a completely different mechanism.
-
JavaParser
Java 1-25 Parser and Abstract Syntax Tree for Java with advanced analysis functionalities.
-
phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
-
revive
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
> Our coding standards require that functions have a fairly low cyclomatic complexity. The goal is to ensure that we never have a a function which is really hard to understand.
https://github.com/fzipp/gocyclo
> * We also require a properly descriptive header comment for each function and one of the main emphases in our code reviews is to evaluate the legibility and sensibility of each function signature very carefully. My thinking is the comment sort of describes "developer's intent" whereas the naming of everything in the signature should give you a strong indication of what the function really does.
https://github.com/mgechev/revive
> Now is this going to buy you good architecture for free, of course not.
It's not architecture to tell people to comment on their functions.
Also FTR, people confuse cyclomatic complexity for automagically making code confusing to the weirdest example I have ever had to deal with - a team had unilaterally decided that the 'else' keyword could never be used in code.
-
A team I was talking to had built a code-review skill in Claude Code. It looked good: a careful prompt, a set of rules, and examples. Then it shipped a PR with a nested recursive loop inside another recursive loop. Cyclomatic complexity any static analyser (PMD, radon, ESLint's complexity rule) would have flagged in milliseconds. The skill missed it.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Code Analysis discussion
Code Analysis related posts
-
I Already Control This Computer. Here's a Tool That Lets Other AIs Do It
-
Graphenium: The trust and verification layer for AI-generated code changes
-
Your next model upgrade won't close this gap
-
Graphenium – Local Trust Layer for AI Agents (Rust, Datalog, Salsa)
-
"Ruby is the most AI-friendly stack" is half true
-
Show HN: Enola-A deterministic architecture graph for developers and AI agents
-
Bimaaji: agent-safe mutations for Waaseyaa
-
A note from our sponsor - SaaSHub
www.saashub.com | 11 Jul 2026
Index
What are some of the best open-source Code Analysis projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | black | 41,688 |
| 2 | p3c | 30,835 |
| 3 | codebase-memory-mcp | 29,404 |
| 4 | YouCompleteMe | 25,908 |
| 5 | golangci-lint | 19,171 |
| 6 | PHP Parser | 17,440 |
| 7 | PHPStan | 14,017 |
| 8 | yapf | 13,983 |
| 9 | PHP CS Fixer | 13,540 |
| 10 | scalene | 13,467 |
| 11 | SonarQube | 10,757 |
| 12 | Rector | 10,354 |
| 13 | Checkstyle | 8,961 |
| 14 | goimports | 7,978 |
| 15 | ctags | 7,237 |
| 16 | Error Prone | 7,195 |
| 17 | isort | 6,951 |
| 18 | larastan | 6,445 |
| 19 | DesktopCommanderMCP | 6,242 |
| 20 | JavaParser | 6,123 |
| 21 | phan | 5,618 |
| 22 | revive | 5,529 |
| 23 | PMD | 5,442 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com