1.astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
+593 stars
from 49,796 · score 6.39
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
27 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
+566 stars
from 16,834 · score 6.34
3.biomejs / biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
+183 stars
from 25,851 · score 5.21
4.eslint / eslint
Find and fix problems in your JavaScript code.
+102 stars
from 27,502 · score 4.63
5.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+85 stars
from 8,281 · score 4.45
6.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+49 stars
from 14,812 · score 3.91
7.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+45 stars
from 9,582 · score 3.83
8.securego / gosec
Go security checker
+40 stars
from 8,955 · score 3.71
9.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+35 stars
from 14,111 · score 3.58
10.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+32 stars
from 15,708 · score 3.50
11.pmd / pmd
An extensible multilanguage static code analyzer.
+29 stars
from 5,494 · score 3.40
12.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+24 stars
from 2,755 · score 3.22
13.standard / standard
🌟 JavaScript Style Guide, with linter & automatic code fixer
+23 stars
from 29,404 · score 3.18
14.pylint-dev / pylint
It's not just a linter that annoys you!
+23 stars
from 5,725 · score 3.18
15.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+18 stars
from 3,947 · score 2.94
16.uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
+16 stars
from 4,111 · score 2.83
17.rubocop / rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
+13 stars
from 12,905 · score 2.64
18.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+12 stars
from 5,548 · score 2.56
19.PyCQA / flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
+11 stars
from 3,822 · score 2.48
20.phan / phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
+4 stars
from 5,620 · score 1.61
21.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+4 stars
from 1,537 · score 1.61
22.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+4 stars
from 918 · score 1.61
23.realvizu / NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
+3 stars
from 300 · score 1.39
24.glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
+2 stars
from 2,158 · score 1.10
25.designsecurity / progpilot
A static analysis tool for security
+2 stars
from 369 · score 1.10
26.google / pytypeArchived
A static type analyzer for Python code
+1 stars
from 5,033 · score 0.69
27.jfmengels / elm-review
Analyzes Elm projects, to help find mistakes before your users find them.
+1 stars
from 283 · score 0.69