47,133 repositories indexed
1–24 of 31 · Most stars
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
React-specific linting rules for ESLint
❤️ JavaScript/TypeScript linter (ESLint wrapper) with great defaults
Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns
More than 300 powerful ESLint rules
An implementation of StyleCop rules using the .NET Compiler Platform
elm-format formats Elm source code according to a standard set of rules based on the official Elm Style Guide
Linting tool for CloudFormation templates
The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
vacuum is the worlds fastest and most versatile OpenAPI, Arazzo, AsyncAPI & JSON Schema linter, docs generator and toolkit. It tears through API specs at light speed. 100% compatible with Spectral rulesets, and OpenAPI 3.0, 3.1 and 3.2
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
ESLint rules for AVA
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Error Prone extensions: extra bug checkers and a large battery of Refaster rules.
VS Code Firestore Rules Extension
OCaml build rules for Bazel
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
Application for HTTP benchmarking via different rules and configs
Agent Skills — agent-neutral autonomous product-building OS for 32+ AI coding tools. 23 skill categories · 28 agents · 149 reference docs · 37 platform variants. One-line prompts → deployed products on Cloudflare Workers.
The tested, tool-agnostic AGENTS.md kit — verified templates, a CI linter, and migrators from .cursorrules/CLAUDE.md/Copilot/Windsurf/Cline/Aider.