Open Source Code Analysis Tools
Code analysis examines source code to reveal its structure, behavior, quality, and potential risks. It helps developers find bugs and vulnerabilities, understand unfamiliar or large codebases, compare changes, and identify opportunities for refactoring. Techniques range from syntax-aware inspection and language-server diagnostics to dependency mapping, code search, and AI-assisted interpretation.
Open source tools in this area include linters, security scanners, structural diff utilities, code intelligence engines, repository indexers, and systems that build searchable code graphs. When choosing one, consider supported languages, analysis depth, accuracy, setup requirements, integrations, license, and maintenance activity. These tools are useful to individual developers, engineering teams, security researchers, and anyone maintaining or learning an existing codebase.
29 repositories · updated October 17, 2026
SocratiCode: Give AI Agents Searchable Codebase Context
SocratiCode is a local-first MCP server and plugin that helps AI agents explore large codebases with semantic search, dependency graphs, and symbol-level impact analysis. It also indexes project context such as API specs and database schemas.
ActiveHealth 75/100
fallow: Analyze TypeScript and JavaScript Codebases
fallow builds a repository graph to find code health issues, complexity hotspots, duplication, architecture violations, styling drift, and unused code. Use it from the CLI, CI, editors, or coding agents, with findings scoped to changed files.
ActiveHealth 74/100
gitnexus: Map Codebases for AI-Assisted Exploration
GitNexus indexes a repository into a code knowledge graph so developers and AI coding agents can trace dependencies, call chains, and execution flows. Use its local CLI and MCP integration for ongoing work, or the browser UI for quick exploration.
ActiveHealth 46/100
open-code-review: Review Code with an AI-Powered CLI
Open Code Review combines deterministic review steps with an LLM agent to inspect code changes and produce line-level comments. It suits teams that want configurable AI reviews in local workflows or CI, with Git 2.41 or newer and an LLM endpoint for managed reviews.
NewHealth 75/100
ASC: Android Decompilation with R8 and Androguard
ASC is a Python Android decompiler for agents and mobile researchers, built on Androguard and using R8 compiler optimizations to search APKs on demand. It targets fast class extraction and cross-DEX reference searches without full-APK preprocessing.
NewHealth 62/100
ferret-mcp: Analyze Codebases Through MCP
Ferret MCP gives AI assistants static codebase analysis and optional LLM-powered reports about architecture, dependencies, patterns, and APIs. It suits developers exploring unfamiliar repositories, but its quiet, single-contributor project status is worth weighing before relying on it in a team workflow.
QuietHealth 20/100
guardvibe: Scan AI-Written Code for Security Issues
GuardVibe is a local security scanner and MCP server for developers building with AI coding agents. It checks code, dependencies, configuration, and prompts, with rules tailored to modern web stacks.
ActiveHealth 41/100
aft: Give Coding Agents IDE-Style Code Tools
AFT equips OpenCode, Pi, and OMP coding agents with symbol-aware code navigation and edits, semantic search, and persistent shell tasks. It is a fit for developers who want agents to work across a codebase more precisely and with less noisy tool output.
ActiveHealth 68/100
antivibe: Learn and Audit Code with Claude Code
AntiVibe is a Claude Code skill that turns files or codebases into learning guides or architectural audits. Use it when you want to understand design choices and trade-offs, rather than rely on a generated code summary.
NewHealth 29/100
code-review-graph: Map Code for AI Reviews
code-review-graph builds a local, persistent map of code structure and serves targeted review context to AI coding tools through MCP and a CLI. It suits teams working in large or interconnected repositories who want impact analysis without repeatedly scanning the whole codebase.
ActiveHealth 71/100
codebase-memory-mcp: Build a Searchable Code Knowledge Graph
A local MCP server that indexes repositories into a persistent graph of code structure and relationships. It helps AI coding agents answer architectural and code-navigation questions with focused queries instead of repeated file searches.
ActiveHealth 69/100
Understand-Anything: Explore Code Through Knowledge Graphs
Understand-Anything analyzes codebases, documentation, and knowledge bases, then presents their structure and relationships as interactive graphs. It is designed for developers and teams who want faster onboarding, code exploration, and change-impact analysis through AI coding platforms.
ActiveHealth 62/100