1.AhmadHassan-BTed / OpenHeart
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
+1,639 stars
from 4,122 · score 7.40
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
27 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.tirth8205 / code-review-graph
Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.
+162 stars
from 32,381 · score 5.09
3.astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
+100 stars
from 50,289 · score 4.62
4.ast-grep / ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
+60 stars
from 16,349 · score 4.11
5.winnin / farol
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
+52 stars
from 119 · score 3.97
6.fallow-rs / fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
+44 stars
from 5,245 · score 3.81
7.horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
+41 stars
from 11,802 · score 3.74
8.kucherenko / jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
+33 stars
from 6,449 · score 3.53
9.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+12 stars
from 15,728 · score 2.56
10.Col-E / Recaf
The modern Java bytecode editor
+12 stars
from 7,440 · score 2.56
11.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+6 stars
from 14,855 · score 1.95
12.dominikh / go-tools
Staticcheck - The advanced Go linter
+6 stars
from 6,915 · score 1.95
13.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+5 stars
from 14,141 · score 1.79
14.realm / SwiftLint
A tool to enforce Swift style and conventions.
+4 stars
from 19,774 · score 1.61
15.meta / pyre-checkArchived
Performant type-checking for python.
+4 stars
from 7,177 · score 1.61
16.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+4 stars
from 5,556 · score 1.61
17.carlosas / phpat
✔️ PHP Architecture Tester - Easy architecture testing for PHP
+4 stars
from 1,286 · score 1.61
18.shipmonk-rnd / dead-code-detector
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
+4 stars
from 530 · score 1.61
19.uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
+3 stars
from 4,124 · score 1.39
20.shivammathur / setup-php
GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.
+2 stars
from 3,267 · score 1.10
21.glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
+2 stars
from 2,158 · score 1.10
22.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+2 stars
from 1,539 · score 1.10
23.gmh5225 / awesome-llvm-security
awesome llvm security [Welcome to PR]
+2 stars
from 888 · score 1.10
24.whitesmith / rubycritic
A Ruby code quality reporter
+1 stars
from 3,507 · score 0.69
25.rubocop / rubocop-rspec
Code style checking for RSpec files.
+1 stars
from 859 · score 0.69
26.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+1 stars
from 553 · score 0.69
27.shinagawa-web / gomarklint
Catch broken links before your readers do.
+1 stars
from 19 · score 0.69