1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+48,874 stars
from 24,357 · score 10.80
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
40 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.repowise-dev / repowise
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
+6,728 stars
from 1,362 · score 8.81
3.fallow-rs / fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
+3,171 stars
from 2,118 · score 8.06
4.keploy / keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
+2,368 stars
from 16,606 · score 7.77
5.meta / pyrefly
A fast type checker and language server for Python
+1,590 stars
from 5,584 · score 7.37
6.hyhmrright / brooks-lint
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
+1,444 stars
from 110 · score 7.28
7.federico-busato / Modern-CPP-Programming
Modern C++ Programming Course (C++03/11/14/17/20/23/26)
+1,158 stars
from 15,112 · score 7.06
8.kucherenko / jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
+909 stars
from 5,573 · score 6.81
9.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+763 stars
from 8,864 · score 6.64
10.SonarSource / sonarqube
Continuous Inspection
+675 stars
from 10,461 · score 6.52
11.Kristories / awesome-guidelines
Programming style, best practices, and coding conventions.
+516 stars
from 10,719 · score 6.25
12.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+385 stars
from 14,476 · score 5.96
13.realm / SwiftLint
A tool to enforce Swift style and conventions.
+325 stars
from 19,453 · score 5.79
14.super-linter / super-linter
Combination of multiple linters to run as a GitHub Action or standalone
+270 stars
from 10,374 · score 5.60
15.agent-sh / agnix
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
+239 stars
from 225 · score 5.48
16.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+219 stars
from 15,521 · score 5.39
17.detekt / detekt
Static code analysis for Kotlin
+205 stars
from 6,901 · score 5.33
18.pmd / pmd
An extensible multilanguage static code analyzer.
+156 stars
from 5,367 · score 5.06
19.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+152 stars
from 2,627 · score 5.03
20.wemake-services / wemake-python-styleguide
The strictest and most opinionated python linter ever!
+117 stars
from 2,824 · score 4.77
21.pylint-dev / pylint
It's not just a linter that annoys you!
+109 stars
from 5,639 · score 4.70
22.bencherdev / bencher
🐰 Bencher - Continuous Benchmarking
+95 stars
from 831 · score 4.56
23.meta / pyre-checkArchived
Performant type-checking for python.
+60 stars
from 7,121 · score 4.11
24.simplecov-ruby / simplecov
Code coverage for Ruby with a powerful configuration library and automatic merging of coverage across test suites
+56 stars
from 4,871 · score 4.04
25.htmlhint / HTMLHint
⚙️ The static code analysis tool you need for your HTML
+55 stars
from 3,261 · score 4.03
26.phpro / grumphp
A PHP code-quality tool
+41 stars
from 4,276 · score 3.74
27.captainhook-git / captainhook
CaptainHook is a very flexible git hook manager for software developers that makes sharing git hooks with your team a breeze.
+31 stars
from 1,098 · score 3.47
28.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+23 stars
from 899 · score 3.18
29.Ericsson / CodeCompass
CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.
+21 stars
from 593 · score 3.09
30.crystal-ameba / ameba
A static code analysis tool for Crystal
+19 stars
from 552 · score 3.00
31.DmytroLitvinov / awesome-flake8-extensions
:octocat: A curated awesome list of flake8 extensions. Feel free to contribute! :mortar_board:
+16 stars
from 1,268 · score 2.83
32.maglnet / ComposerRequireChecker
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
+15 stars
from 996 · score 2.77
33.ehmicky / cross-platform-node-guide
📗 How to write cross-platform Node.js code
+12 stars
from 1,411 · score 2.56
34.SonarSource / sonarlint-visualstudio
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
+9 stars
from 491 · score 2.30
35.integrated-application-development / sonar-delphi
Delphi language plugin for SonarQube
+7 stars
from 153 · score 2.08
36.wemake-services / docker-image-size-limit
:whale: Keep an eye on your docker image size and prevent it from growing too big
+4 stars
from 130 · score 1.61
37.jfmengels / elm-review
Analyzes Elm projects, to help find mistakes before your users find them.
+3 stars
from 281 · score 1.39
38.hashmap-kz / relimpact
Fast API compatibility reports for Go projects
+3 stars
from 10 · score 1.39
39.wemake-services / wemake-frontend-styleguide
Set of the strictest linters for your next frontend app
+1 stars
from 82 · score 0.69
40.crealoz / easyaudit-cli
Static analysis CLI tool for Magento 2 codebases - detects anti-patterns, code quality issues, and architectural problems. SARIF output for CI/CD integration.
+1 stars
from 14 · score 0.69