1.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
+132 stars
from 17,268 · score 4.89
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
23 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
+100 stars
from 50,289 · score 4.62
3.biomejs / biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
+37 stars
from 25,997 · score 3.64
4.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+19 stars
from 8,347 · score 3.00
5.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+12 stars
from 15,728 · score 2.56
6.eslint / eslint
Find and fix problems in your JavaScript code.
+11 stars
from 27,593 · score 2.48
7.securego / gosec
Go security checker
+9 stars
from 8,986 · score 2.30
8.pylint-dev / pylint
It's not just a linter that annoys you!
+8 stars
from 5,740 · score 2.20
9.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+7 stars
from 9,620 · score 2.08
10.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+7 stars
from 2,772 · score 2.08
11.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+6 stars
from 14,855 · score 1.95
12.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+5 stars
from 14,141 · score 1.79
13.pmd / pmd
An extensible multilanguage static code analyzer.
+5 stars
from 5,518 · score 1.79
14.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+4 stars
from 5,556 · score 1.61
15.uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
+3 stars
from 4,124 · score 1.39
16.PyCQA / flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
+3 stars
from 3,830 · score 1.39
17.realvizu / NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
+3 stars
from 300 · score 1.39
18.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+2 stars
from 3,963 · score 1.10
19.glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
+2 stars
from 2,158 · score 1.10
20.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+2 stars
from 1,539 · score 1.10
21.standard / standard
🌟 JavaScript Style Guide, with linter & automatic code fixer
+1 stars
from 29,426 · score 0.69
22.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+1 stars
from 921 · score 0.69
23.rubocop / rubocop-rails
A RuboCop extension focused on enforcing Rails best practices and coding conventions.
+1 stars
from 876 · score 0.69