1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
47 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.repowise-dev / repowise
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
+3,578 stars
from 4,512 · score 8.18
3.fallow-rs / fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
+1,081 stars
from 4,208 · score 6.99
4.keploy / keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
+903 stars
from 18,071 · score 6.81
5.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+671 stars
from 8,956 · score 6.51
6.kucherenko / jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
+533 stars
from 5,949 · score 6.28
7.meta / pyrefly
A fast type checker and language server for Python
+374 stars
from 6,800 · score 5.93
8.federico-busato / Modern-CPP-Programming
Modern C++ Programming Course (C++03/11/14/17/20/23/26)
+364 stars
from 15,906 · score 5.90
9.SonarSource / sonarqube
Continuous Inspection
+301 stars
from 10,835 · score 5.71
10.hyhmrright / brooks-lint
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
+280 stars
from 1,274 · score 5.64
11.Kristories / awesome-guidelines
Programming style, best practices, and coding conventions.
+255 stars
from 10,980 · score 5.55
12.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+181 stars
from 14,680 · score 5.20
13.realm / SwiftLint
A tool to enforce Swift style and conventions.
+143 stars
from 19,635 · score 4.97
14.super-linter / super-linter
Combination of multiple linters to run as a GitHub Action or standalone
+131 stars
from 10,513 · score 4.88
15.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+102 stars
from 15,638 · score 4.63
16.detekt / detekt
Static code analysis for Kotlin
+98 stars
from 7,008 · score 4.60
17.agent-sh / agnix
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
+96 stars
from 368 · score 4.57
18.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+75 stars
from 2,704 · score 4.33
19.pmd / pmd
An extensible multilanguage static code analyzer.
+74 stars
from 5,449 · score 4.32
20.wemake-services / wemake-python-styleguide
The strictest and most opinionated python linter ever!
+67 stars
from 2,874 · score 4.22
21.pylint-dev / pylint
It's not just a linter that annoys you!
+52 stars
from 5,696 · score 3.97
22.bencherdev / bencher
🐰 Bencher - Continuous Benchmarking
+50 stars
from 876 · score 3.93
23.htmlhint / HTMLHint
⚙️ The static code analysis tool you need for your HTML
+29 stars
from 3,287 · score 3.40
24.simplecov-ruby / simplecov
Code coverage for Ruby with a powerful configuration library and automatic merging of coverage across test suites
+22 stars
from 4,905 · score 3.14
25.meta / pyre-checkArchived
Performant type-checking for python.
+21 stars
from 7,160 · score 3.09
26.phpro / grumphp
A PHP code-quality tool
+17 stars
from 4,300 · score 2.89
27.captainhook-git / captainhook
CaptainHook is a very flexible git hook manager for software developers that makes sharing git hooks with your team a breeze.
+16 stars
from 1,113 · score 2.83
28.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+14 stars
from 908 · score 2.71
29.Ericsson / CodeCompass
CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.
+10 stars
from 604 · score 2.40
30.crystal-ameba / ameba
A static code analysis tool for Crystal
+10 stars
from 561 · score 2.40
31.ehmicky / cross-platform-node-guide
📗 How to write cross-platform Node.js code
+8 stars
from 1,415 · score 2.20
32.DmytroLitvinov / awesome-flake8-extensions
:octocat: A curated awesome list of flake8 extensions. Feel free to contribute! :mortar_board:
+7 stars
from 1,277 · score 2.08
33.maglnet / ComposerRequireChecker
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
+7 stars
from 1,004 · score 2.08
34.PicnicSupermarket / error-prone-support
Error Prone extensions: extra bug checkers and a large battery of Refaster rules.
+7 stars
from 37 · score 2.08
35.Zandereins / schliff
Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies
+6 stars
from 12 · score 1.95
36.wei18 / Upkeep
Upkeep — an AI audit crew for your repo. Catches docs/spec/asset drift with evidence; output-only. Claude Code plugin/skill + reusable CI workflow.
+6 stars
from 10 · score 1.95
37.nenadvulic / solid-like-a-rock
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
+4 stars
from 27 · score 1.61
38.lemon-ant / JHarmonizer
Make Java source layout deterministic: reorder class members safely, keep accessors together, format java-source, and enforce style in CI.
+4 stars
from 26 · score 1.61
39.SonarSource / sonarlint-visualstudio
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
+3 stars
from 497 · score 1.39
40.integrated-application-development / sonar-delphi
Delphi language plugin for SonarQube
+3 stars
from 157 · score 1.39
41.jfmengels / elm-review
Analyzes Elm projects, to help find mistakes before your users find them.
+1 stars
from 283 · score 0.69
42.wemake-services / docker-image-size-limit
:whale: Keep an eye on your docker image size and prevent it from growing too big
+1 stars
from 133 · score 0.69
43.ehmicky / test-each
🤖 Repeat tests. Repeat tests. Repeat tests.
+1 stars
from 118 · score 0.69
44.wemake-services / wemake-frontend-styleguide
Set of the strictest linters for your next frontend app
+1 stars
from 82 · score 0.69
45.editorconfig-checker / editorconfig-checker.php
A tool to verify that your files are in harmony with your .editorconfig
+1 stars
from 75 · score 0.69
46.Luttik / auto-optionalArchived
Makes typed arguments Optional when the default argument is None
+1 stars
from 19 · score 0.69
47.crealoz / easyaudit-cli
Static analysis CLI tool for Magento 2 codebases - detects anti-patterns, code quality issues, and architectural problems. SARIF output for CI/CD integration.
+1 stars
from 14 · score 0.69