Testing & QA

Bundler-audit is a tool that checks for vulnerabilities in your Bundler dependencies. It verifies the patch level of your dependencies to ensure they are up-to-date and secure. This helps prevent potential security breaches and ensures the integrity of your application. Bundler-audit is designed to work seamlessly with Bundler, making it easy to integrate into your development workflow.

✦ Best for ruby developers seeking free security tools

Pre-commit is a framework for managing and maintaining multi-language pre-commit hooks. It allows developers to define and enforce coding standards, automate testing, and ensure code quality across different programming languages.

✦ Best for large, polyglot development teams

Puppeteer is a Node library developed by the Chrome team that provides a high-level API to control a headless Chrome or Chromium browser instance. It can be used to automate web page interactions, generate screenshots and PDFs, and crawl web pages.

✦ Best for experienced node.js developers

ruff is a Python linter and code formatter that is designed to be extremely fast. It is written in Rust and is capable of handling large codebases with ease. ruff is designed to be highly configurable and can be integrated into a variety of development workflows.

✦ Best for large-scale python projects needing speed

Mypy is a static type checker for Python that aims to combine the benefits of dynamic typing and static typing. It allows developers to add type annotations to their Python code and then checks the types at compile time, preventing type-related errors at runtime.

✦ Best for python teams seeking gradual type adoption.

Code-review-graph is a local-first code intelligence graph designed for efficient code reviews. It builds a persistent map of your codebase, allowing AI coding tools to focus on what matters. This results in benchmarked context reductions on reviews and large-repo workflows. By optimizing the code review process, developers can work more efficiently and effectively.

✦ Best for large codebase development teams

rrweb is an open-source tool that allows users to record and replay web interactions. It provides a way to record user interactions on a website, such as mouse movements, clicks, and keyboard input, and then replay them later. This can be useful for testing, debugging, and analytics purposes.

✦ Best for small-scale web testing and debugging

x64dbg is a free, open‑source debugger designed specifically for Windows binaries. It offers a modern UI, scriptable interface, and extensive plugin ecosystem to aid reverse engineers and malware analysts. The tool supports both 32‑bit and 64‑bit executables, providing intuitive disassembly, memory view, and breakpoint management. Its community‑driven development ensures regular updates and active support through GitHub and email.

✦ Best for seasoned windows reverse engineers needing extensible debugging

Delve is a debugger for the Go programming language. It provides a simple and intuitive way to debug Go programs, allowing developers to step through code, set breakpoints, and inspect variables.

✦ Best for go developers seeking simple debugging tools

Ghidra is a software reverse engineering (SRE) framework developed by the National Security Agency (NSA). It is designed to help users analyze and understand the behavior of software, and can be used for a variety of purposes such as vulnerability research, malware analysis, and software debugging. Ghidra provides a comprehensive set of tools and features to support the reverse engineering process, including disassembly, decompilation, and debugging capabilities.

✦ Best for advanced security researchers and developers

jadx is a command line and GUI tool for producing Java source code from Android Dex and APK files. It's a popular tool among Android developers and reverse engineers.

✦ Best for experienced android developers and reverse engineers

k6 is a modern load testing tool for engineering teams. It provides a simple and efficient way to test the performance and reliability of applications and APIs under various loads. With k6, you can simulate a large number of concurrent users, analyze performance metrics, and identify bottlenecks in your system.

✦ Best for devops teams seeking cloud-compatible load testing