GitHub stars · StarDay

1astral-sh / ruffAn extremely fast Python linter and code formatter, written in Rust.RustMIT · Permissive50,495

2standard / standard🌟 JavaScript Style Guide, with linter & automatic code fixerJavaScriptMIT · Permissive29,423

3eslint / eslintFind and fix problems in your JavaScript code.JavaScriptMIT · Permissive27,603

4biomejs / biomeA toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.RustApache-2.0 · Permissive26,054

5semgrep / semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.CLGPL-2.1 · Share derivative source17,513

6meta / inferA static analyzer for Java, C, C++, and Objective-COCamlMIT · Permissive15,745

7analysis-tools-dev / static-analysis⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.RustMIT · Permissive14,874

8phpstan / phpstanPHP Static Analysis Tool - discover bugs in your code without running it!PHPMIT · Permissive14,147

9rubocop / rubocopA Ruby static code analyzer and formatter, based on the community Ruby style guide.RubyMIT · Permissive12,918

10reviewdog / reviewdog🐶 Automated code review tool integrated with any code analysis tools regardless of programming languageGoMIT · Permissive9,716

11checkstyle / checkstyleCheckstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.JavaLGPL-2.1 · Share derivative source9,630

12securego / gosecGo security checkerGoApache-2.0 · Permissive9,001

13PyCQA / banditBandit is a tool designed to find common security issues in Python code.PythonApache-2.0 · Permissive8,374

14pylint-dev / pylintIt's not just a linter that annoys you!PythonGPL-2.0 · Share derivative source5,745

15phan / phanPhan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.PHPLicense not declared5,624

16revive-lint / revive🔥 Fast, strict, configurable, extensible, and beautiful linter for GoGoMIT · Permissive5,561

17pmd / pmdAn extensible multilanguage static code analyzer.JavaLicense not declared5,525

18uber / NullAwayA tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overheadJavaMIT · Permissive4,130

19spotbugs / spotbugsSpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.JavaLGPL-2.1 · Share derivative source3,966

20PyCQA / flake8flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.PythonLicense not declared3,833