Code Scanning Python Packages

lintrunner-adapters

Adapters and tools for lintrunner

skylos

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

skills-orchestrator

Open-source SkillOps / instruction-supply-chain control plane for AI-agent teams: policy packs, registry diff, evidence bundles, SARIF/SBOM, adapters, and MCP runtime.

codescanai

CodeScanAI is an open source tool that utilizes powerful AI models (OpenAI, Gemini, and even self-hosted servers) to scan your codebase for possible security vulnerabilities.

codepathfinder

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

mcp-riskmap

Local-first static auditor for risky MCP and agent-tool repository patterns.

codetrellis

Open-source project awareness engine for AI coding tools via compressed codebase context, MCP, and editor integrations.

graveyard

Find dead code across Python, JS/TS, Go, and Rust with git-aware confidence scoring.

pydependence

🕵️🐍 Generate requirements.txt and pyproject.toml extras across modules, with configurable starting points, using import graph traversal and the python AST. Fully configurable and works with pre-commit.