1.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
- sast
- semgrep
- +6 more
+1,389 stars
from 16,069 · score 7.24
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
3 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
- linter
- hacktoberfest
+53 stars
from 3,912 · score 3.99
3.rocq-community / coq-dpdgraph
Build dependency graphs between Coq objects [maintainers=@Karmaki,@ybertot]
- coq
- dependency-graph
- dependency-analysis
- docker-coq-action
- coq-ci
- coq-platform
+3 stars
from 100 · score 1.39