Ranked by Attention Score: stars gained over the last 7 complete days
30 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
Tooling and libraries to enforce zero heap allocations in Golang
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
A static analyzer for Java, C, C++, and Objective-C
PHP Static Analysis Tool - discover bugs in your code without running it!
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Staticcheck - The advanced Go linter
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Beautiful and understandable static analysis tool for PHP
Tfsec is now part of Trivy
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
Manage translation and localization with static analysis, for Ruby i18n
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Refactoring Essentials for Visual Studio
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.