1.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+105 stars
from 14,041 · score 4.66
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
14 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.Ericsson / codechecker
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
+39 stars
from 2,592 · score 3.69
3.phpmd / phpmd
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
+26 stars
from 2,438 · score 3.30
4.fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
+21 stars
from 1,342 · score 3.09
5.phpmetrics / PhpMetrics
Beautiful and understandable static analysis tool for PHP
+18 stars
from 2,598 · score 2.94
6.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+14 stars
from 908 · score 2.71
7.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+13 stars
from 1,528 · score 2.64
8.SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
+9 stars
from 1,211 · score 2.30
9.vbpf / prevail
eBPF verifier based on abstract interpretation
+5 stars
from 467 · score 1.79
10.llvm-mirror / clangArchived
Mirror kept for legacy. Moved to https://github.com/llvm/llvm-project
+4 stars
from 3,037 · score 1.61
11.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+4 stars
from 550 · score 1.61
12.ECSIM / opem
OPEM (Open Source PEM Fuel Cell Simulation Tool)
+4 stars
from 230 · score 1.61
13.integrated-application-development / sonar-delphi
Delphi language plugin for SonarQube
+3 stars
from 157 · score 1.39
14.sleekbyte / tailor
Cross-platform static analyzer and linter for Swift.
+2 stars
from 1,405 · score 1.10