I would like to endorse this RFP; I was about to file one for it myself. shfmt can be used as a more powerful alternative to `sh -n`, able to detect use of bashisms in scripts that are supposed to be POSIX-only. And it has an option to dump out its parse tree as JSON, which could make life easier for programs that want to analyze shell scripts.
zw