Retour au classement

vimeo/psalm

PHPpsalm.dev

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

static-analysisphptype-inferencesecurity-analysistaint-analysishacktoberfest
Croissance des étoiles
Étoiles
5.9k
Forks
700
Croissance hebdomadaire
Issues
1.9k
2k4k
nov. 2016janv. 2020avr. 2023juil. 2026
ArtefactsPackagistcomposer require vimeo/psalm
README

Psalm

Packagist Packagist Psalm coverage Psalm level

Psalm is a static analysis tool for finding errors in PHP applications.

Join the official Psalm news channel and the Psalm community!

Installation

To get started, check out the installation guide.

Live Demo

You can play around with Psalm on its website.

Documentation

Documentation is available on Psalm’s website, generated from the docs folder.

Support Psalm development

You can support Psalm development by requesting a support contract from Daniil Gentili, the only active maintainer of Psalm.

Support contracts can cover full integration of Psalm into existing codebases, support for Psalm issues and development of additional Psalm features.

See here » for info, pricing and contact information.

Interested in contributing?

Have a look at CONTRIBUTING.md.

Who made this

Built by Matt Brown (@muglug).

Maintained by Daniil Gentili (@danog).

Former maintainers: Orklah (@orklah) and Bruce Weirdan (@weirdan).

The engineering team at Vimeo have provided a lot encouragement, especially @nbeliard, @erunion and @nickyr.

Dépôts similaires
WerWolv/ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

C++GNU General Public License v2.0hex-editorreverse-engineering
imhex.werwolv.net
54.2k2.4k
astral-sh/ruff

An extremely fast Python linter and code formatter, written in Rust.

Rustcrates.ioMIT Licenselinterpep8
docs.astral.sh/ruff
48.8k2.3k
koalaman/shellcheck

ShellCheck, a static analysis tool for shell scripts

HaskellGNU General Public License v3.0haskellshell
shellcheck.net
39.7k1.9k
tirth8205/code-review-graph

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

PythonPyPIMIT Licenseai-codingclaude
code-review-graph.com
24.7k2.4k
MobSF/Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

JavaScriptnpmGNU General Public License v3.0static-analysisdynamic-analysis
opensecurity.in
21.5k3.7k
realm/SwiftLint

A tool to enforce Swift style and conventions.

SwiftMIT Licenselinterlinting
realm.github.io/SwiftLint
19.7k2.3k
nikic/PHP-Parser

A PHP parser written in PHP

PHPPackagistBSD 3-Clause "New" or "Revised" Licensephpparser
17.5k1.1k
semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCamlGNU Lesser General Public License v2.1static-analysisstatic-code-analysis
semgrep.dev
16k999
facebook/infer

A static analyzer for Java, C, C++, and Objective-C

OCamlMIT Licensestatic-analysisstatic-code-analysis
fbinfer.com
15.7k2.1k
Konloch/bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

JavaMavenGNU General Public License v3.0java-decompilerapk
bytecodeviewer.com
15.6k1.3k
ast-grep/ast-grep

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

Rustcrates.ioMIT Licensecodemodlinter
ast-grep.github.io
15.1k417
analysis-tools-dev/static-analysis

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

Rustcrates.ioMIT Licensestatic-analysisstatic-analyzers
analysis-tools.dev
14.7k1.5k