#static-analysis

GameMaker Toolkit

alexdotpink

Formatter, analyzer, project index, and language tools for GameMaker Language (.gml) in VS Code.

CodeGraph for VSCode

videostack

VS Code extension for CodeGraph - semantic code intelligence

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

Django ORM Lens

frowningdev

See your entire Django schema in your editor, and gate it in CI. Live sidebar, ER diagrams, impact analysis, blast radius and schema drift. Static analysis - no DB, no Django boot. Free and MIT, no Pro tier.

Mago LSP

Clearlyip

PHP linting, formatting, and analysis via the Mago language server

Prometheus IntelliSense

Prometheus-analises

Inteligência de código completa com Prometheus - análise em tempo real, hover, code lens, completação, hints e muito mais para todas as linguagens suportadas

C Stack Analysis & Call Graph

HALISTAHASAHIN

Visualize C call depth, worst-case stack usage (-fstack-usage), and the call graph inline — built for embedded/firmware and DO-178C / ISO 26262 stack-usage review.

SAP Object Explorer

StormShyn

Offline SAP/ABAP workbench for abapGit-exported code: object catalog, where-used graph, diagnostics, abaplint, metrics, dependency and CDS graphs, and a local-AI assistant - no ADT, SAP backend, or network required.

DrBinary MCP

deepbits

Adds the DrBinary (Deepbits) security MCP server to VS Code for malware analysis, binary reverse engineering, and threat detection.

LiveComplexity: Real-time Big-O Analysis

livecomplexity

Real-time AST-based Big-O time complexity analysis for C++ with inline editor annotations and hover explanations.

Trace Function Flow

sudopanda

Visualize execution paths across functions, hooks, components, services, routes, and APIs with an interactive call graph. Trace end-to-end code flow across TypeScript, JavaScript, React, and Next.js projects.