1.millionco / react-doctor
Your agent writes bad React. This catches it
- agents
- code-review
- doctor
- react
- skill
+8,845 stars
from 6,234 · score 9.09
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
16 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.repowise-dev / repowise
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
- documentation
- git-analytics
- +9 more
+6,749 stars
from 1,376 · score 8.82
3.ast-grep / ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
- codemod
- linter
- ast
- babel
- command-line
- command-line-tool
- +9 more
+2,800 stars
from 13,631 · score 7.94
4.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
- sast
- semgrep
- +6 more
+2,496 stars
from 14,936 · score 7.82
5.webpro-nl / knip
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
- unused-code
- unused-exports
- +4 more
+1,494 stars
from 11,100 · score 7.31
6.MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
- mobile-security
- windows-mobile-security
- +13 more
+1,302 stars
from 20,819 · score 7.17
7.koalaman / shellcheck
ShellCheck, a static analysis tool for shell scripts
+1,071 stars
from 39,206 · score 6.98
+676 stars
from 10,467 · score 6.52
9.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
- terraform
- static-analysis
- aws
- gcp
- azure
- aws-security
- +7 more
+475 stars
from 8,656 · score 6.17
10.bufbuild / buf
The best way of working with Protocol Buffers.
+471 stars
from 11,043 · score 6.16
11.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
- security
- static-code-analysis
- +1 more
+418 stars
from 7,952 · score 6.04
12.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
- phpstan
- static-analysis
- php
- php7
- testing
- static-code-analysis
- +1 more
+272 stars
from 13,877 · score 5.61
13.securego / gosec
Go security checker
- golang
- security
- security-tools
- security-automation
- static-analysis
- static-code-analysis
+240 stars
from 8,757 · score 5.48
14.meta / infer
A static analyzer for Java, C, C++, and Objective-C
- static-analysis
- static-code-analysis
- code-quality
- java
- c
- cpp
- +1 more
+219 stars
from 15,523 · score 5.39
+120 stars
from 7,894 · score 4.80
+43 stars
from 8,519 · score 3.78