47,133 repositories indexed
1–24 of 35 · Most stars
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
React-specific linting rules for ESLint
❤️ JavaScript/TypeScript linter (ESLint wrapper) with great defaults
Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns
More than 300 powerful ESLint rules
An implementation of StyleCop rules using the .NET Compiler Platform
PHP Compatibility check for PHP_CodeSniffer
The most opinionated Go source code linter for code audit.
elm-format formats Elm source code according to a standard set of rules based on the official Elm Style Guide
Linting tool for CloudFormation templates
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Clean architecture validator for go, like a The Dependency Rule and interaction between packages in your Go projects.
ESLint rules for functional programming
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
ESLint rules for AVA
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
Design rules and a zero-dependency checker for interfaces built with AI coding agents, on the web and in SwiftUI and Jetpack Compose apps. English and Turkish.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
iOS validation framework with form validation support
Error Prone extensions: extra bug checkers and a large battery of Refaster rules.
VS Code Firestore Rules Extension
OCaml build rules for Bazel