1.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
- sast
- semgrep
- +6 more
+133 stars
from 17,325 · score 4.90
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
3 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
2.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
- linter
- hacktoberfest
+1 stars
from 3,964 · score 0.69
3.rocq-community / coq-dpdgraph
Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]
- coq
- dependency-graph
- dependency-analysis
- docker-coq-action
- coq-ci
- coq-platform
+1 stars
from 102 · score 0.69