Static Analyzer Python Packages

libsast

Generic SAST Library

scan-build

Clang's scan-build re-implementation in python

mr-proper

Static Python code analyzer, that tries to check if functions in code are pure or not and why.

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

miss-hit-core

MATLAB Independent, Small & Safe, High Integrity Tools - code formatter and more

miss-hit

MATLAB Independent, Small & Safe, High Integrity Tools - code formatter and more

slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality. 14 SQL dialects. Offline. CI/CD ready.

codechecker-api

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

codechecker-api-shared

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

pynblint

Pynblint is a linter for Python Jupyter notebooks.

lintorn

Vérifie que ta doc et la mémoire de ton IA disent encore la vérité sur ton code.

pystrict3

pystrict3 analyses code for sanity and plausibility. Checks whether function calls are plausible and docstrings match function signatures.

opem

OPEM (Open Source PEM Fuel Cell Simulation Tool)

nowreck

A CLI tool that verifies AI coding assistant claims against actual structural changes — catching hallucinated functions, fake calls, and missed modifications before they ship.

dockerfile-sec

Static security checker for Dockerfiles

py-wtf

A static analyzer of Python which forces you to write comments, and write them in a well-mannered way.