1.astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
+1,590 stars
from 48,799 · score 7.37
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
31 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
+1,353 stars
from 16,047 · score 7.21
3.biomejs / biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
+678 stars
from 25,356 · score 6.52
4.checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
+671 stars
from 8,956 · score 6.51
5.eslint / eslint
Find and fix problems in your JavaScript code.
+273 stars
from 27,331 · score 5.61
6.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+197 stars
from 8,169 · score 5.29
7.analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
+181 stars
from 14,680 · score 5.20
8.securego / gosec
Go security checker
+115 stars
from 8,880 · score 4.75
9.phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
+105 stars
from 14,041 · score 4.66
10.meta / infer
A static analyzer for Java, C, C++, and Objective-C
+102 stars
from 15,638 · score 4.63
11.standard / standard
🌟 JavaScript Style Guide, with linter & automatic code fixer
+75 stars
from 29,352 · score 4.33
12.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+75 stars
from 2,704 · score 4.33
13.pmd / pmd
An extensible multilanguage static code analyzer.
+74 stars
from 5,449 · score 4.32
14.uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
+55 stars
from 4,072 · score 4.03
15.spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+53 stars
from 3,912 · score 3.99
16.pylint-dev / pylint
It's not just a linter that annoys you!
+52 stars
from 5,696 · score 3.97
17.rubocop / rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
+51 stars
from 12,867 · score 3.95
18.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+34 stars
from 5,526 · score 3.56
19.PyCQA / flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
+34 stars
from 3,799 · score 3.56
20.phan / phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
+14 stars
from 5,610 · score 2.71
21.SonarSource / sonar-dotnet
Code analyzer for C# and VB.NET projects
+14 stars
from 908 · score 2.71
22.phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
+13 stars
from 1,528 · score 2.64
23.SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
+9 stars
from 1,211 · score 2.30
24.realvizu / NsDepCop
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
+9 stars
from 294 · score 2.30
25.google / pytypeArchived
A static type analyzer for Python code
+7 stars
from 5,027 · score 2.08
26.designsecurity / progpilot
A static analysis tool for security
+7 stars
from 364 · score 2.08
27.glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
+6 stars
from 2,154 · score 1.95
28.rubocop / rubocop-rails
A RuboCop extension focused on enforcing Rails best practices and coding conventions.
+4 stars
from 873 · score 1.61
29.rubocop / rubocop-performance
An extension of RuboCop focused on code performance checks.
+3 stars
from 739 · score 1.39
30.vincentcox / StaCoAn
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
+2 stars
from 868 · score 1.10
31.jfmengels / elm-review
Analyzes Elm projects, to help find mistakes before your users find them.
+1 stars
from 283 · score 0.69