#static-analysis

codelyLab

codelyLab

Structural code reports for JavaScript/TypeScript and common C-family / JVM languages in the editor. Fully local, no AI API.

Deep static analysis of Python files: structure, complexity, code smells and beginner/intermediate/advanced level estimation.

Archon for C# and SQL

jakoreilly

Architecture, lifetime and SQL rules for C# and T-SQL, from one analysis process.

CodeTrail: C Evidence Paths

crankysmh47

Search unfamiliar C code as evidence-backed file and symbol paths.

CodeGuard AI - Bug Detection & Fixes

codeguard-ai-official

AI-powered bug detection and fix suggestion tool

Static analyzer for Miranda code: pattern coverage, style, and documentation diagnostics with per-profile configuration.

code-explainer-by-pakistani-dev

SulemExtensions

VS Code extension for explaining code with AI, static analysis, and quick fixes.

Coderot

coderot-engine

Refactor Priority Engine — know what to fix first. v1.11.0: Webview Dashboard, 37 rules (cyclomatic-risk, credential-exposure, unhandled-async-risk, import-cycle, and more), local history, and --watch for continuous re-analysis.

ArchiGraph

archigraph

A local-first VS Code map of capabilities, use cases, API flows, and code calls for Python and web projects.

SecretLens — Secret Scanner

PQRHoldings

Manually scan your VS Code workspace for exposed API keys, credentials, tokens, private keys, and connection strings—entirely locally.

Guardmarly — Offline SAST Security Scanner

guardmarly

Zero-dependency SAST for Python, JS/TS, Go, Java & C#. Built-in IDOR detection. 100% CVE recall. Trace-backed findings inline while you code.

Execution-aware security intelligence for Laravel and NestJS — CodeLens showing auth, validation, services, and risks on every route handler