1.NPMscan / npmscan-action
Catch risky npm dependency changes before they merge.
+350 stars
from 170 · score 5.86
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
9 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.openqodex / openqodex
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
+309 stars
from 784 · score 5.74
3.fastapi / full-stack-fastapi-template
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
+72 stars
from 46,065 · score 4.29
4.winnin / farol
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
+52 stars
from 119 · score 3.97
5.step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
+6 stars
from 1,289 · score 1.95
6.google-github-actions / run-gemini-cli
A GitHub Action invoking the Gemini CLI.
+4 stars
from 2,113 · score 1.61
7.node9-ai / node9-proxy
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
+4 stars
from 219 · score 1.61
8.shivammathur / setup-php
GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.
+2 stars
from 3,267 · score 1.10
9.stepci / stepci
Automated API Testing and Quality Assurance
+1 stars
from 1,872 · score 0.69