Ranked by Attention Score: stars gained over the last 30 complete days
36 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
PHP Static Analysis Tool - discover bugs in your code without running it!
A static analyzer for Java, C, C++, and Objective-C
Staticcheck - The advanced Go linter
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Tfsec is now part of Trivy
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
🔰 Instant PHP quality checks from your console
Pretty good call graphs for dynamic languages
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
A tool to identify unused code in Swift projects.
A Ruby code quality reporter
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Detect copy-pasted and structurally similar code
Beautiful and understandable static analysis tool for PHP
Manage translation and localization with static analysis, for Ruby i18n
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
A static analysis tool for security
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
eBPF verifier based on abstract interpretation
Useful tools for Sorbet enthusiasts
A tool for quantitative risk analysis of Android applications based on machine learning techniques