1.astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
+3,398 stars
from 46,991 · score 8.13
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
31 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
+2,484 stars
from 14,916 · score 7.82
3.biomejs / biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
+1,768 stars
from 24,266 · score 7.48
4.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+763 stars
from 8,864 · score 6.64
5.eslint / eslint
Find and fix problems in your JavaScript code.
+614 stars
from 26,990 · score 6.42
6.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+418 stars
from 7,948 · score 6.04
7.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+385 stars
from 14,476 · score 5.96
8.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+270 stars
from 13,876 · score 5.60
9.securego / gosec
Go security checker
+239 stars
from 8,756 · score 5.48
10.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+219 stars
from 15,521 · score 5.39
11.pmd / pmd
An extensible multilanguage static code analyzer.
+156 stars
from 5,367 · score 5.06
12.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+152 stars
from 2,627 · score 5.03
13.standard / standard
🌟 JavaScript Style Guide, with linter & automatic code fixer
+141 stars
from 29,286 · score 4.96
14.rubocop / rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
+113 stars
from 12,805 · score 4.74
15.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+111 stars
from 3,854 · score 4.72
16.pylint-dev / pylint
It's not just a linter that annoys you!
+109 stars
from 5,639 · score 4.70
17.uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
+106 stars
from 4,021 · score 4.67
18.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+85 stars
from 5,475 · score 4.45
19.PyCQA / flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
+77 stars
from 3,756 · score 4.36
20.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+27 stars
from 1,514 · score 3.33
21.google / pytypeArchived
A static type analyzer for Python code
+25 stars
from 5,009 · score 3.26
22.phan / phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
+23 stars
from 5,601 · score 3.18
23.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+23 stars
from 899 · score 3.18
24.SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
+19 stars
from 1,201 · score 3.00
25.rubocop / rubocop-rails
A RuboCop extension focused on enforcing Rails best practices and coding conventions.
+18 stars
from 859 · score 2.94
26.realvizu / NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
+18 stars
from 285 · score 2.94
27.rubocop / rubocop-performance
An extension of RuboCop focused on code performance checks.
+16 stars
from 726 · score 2.83
28.glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
+11 stars
from 2,149 · score 2.48
29.designsecurity / progpilot
A static analysis tool for security
+11 stars
from 360 · score 2.48
30.vincentcox / StaCoAn
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
+4 stars
from 866 · score 1.61
31.jfmengels / elm-review
Analyzes Elm projects, to help find mistakes before your users find them.
+3 stars
from 281 · score 1.39