1.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
- sast
- semgrep
- +6 more
+584 stars
from 16,874 · score 6.37
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
3 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
- linter
- hacktoberfest
+18 stars
from 3,947 · score 2.94
3.rocq-community / coq-dpdgraph
Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]
- coq
- dependency-graph
- dependency-analysis
- docker-coq-action
- coq-ci
- coq-platform
+2 stars
from 101 · score 1.10