1.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+270 stars
from 13,876 · score 5.60
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
13 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.Ericsson / codechecker
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
+74 stars
from 2,557 · score 4.32
3.phpmd / phpmd
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
+55 stars
from 2,409 · score 4.03
4.fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
+37 stars
from 1,326 · score 3.64
5.phpmetrics / PhpMetrics
Beautiful and understandable static analysis tool for PHP
+34 stars
from 2,582 · score 3.56
6.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+27 stars
from 1,514 · score 3.33
7.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+23 stars
from 899 · score 3.18
8.SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
+19 stars
from 1,201 · score 3.00
9.llvm-mirror / clangArchived
Mirror kept for legacy. Moved to https://github.com/llvm/llvm-project
+16 stars
from 3,025 · score 2.83
10.vbpf / prevail
eBPF verifier based on abstract interpretation
+15 stars
from 457 · score 2.77
11.integrated-application-development / sonar-delphi
Delphi language plugin for SonarQube
+7 stars
from 153 · score 2.08
12.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+5 stars
from 549 · score 1.79
13.sleekbyte / tailor
Cross-platform static analyzer and linter for Swift.
+4 stars
from 1,403 · score 1.61