代码质量

149 条
#仓库Stars
1astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
51k
2alibaba/open-code-review
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
50k
3koalaman/shellcheck
ShellCheck, a static analysis tool for shell scripts
40k
4trailofbits/algo
Set up a personal VPN in the cloud
30k
5realm/SwiftLint
A tool to enforce Swift style and conventions.
20k
6so-fancy/diff-so-fancy
Make your diffs human readable for improved code quality and faster defect detection. :tada:
18k
7semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
18k
8nikic/PHP-Parser
A PHP parser written in PHP
17k
9ast-grep/ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
17k
10winsiderss/systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
16k
11The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
16k
12meta/infer
A static analyzer for Java, C, C++, and Objective-C
16k
13pre-commit/pre-commit
A framework for managing and maintaining multi-language pre-commit hooks.
16k
14millionco/react-doctor
Your agent writes bad React. This catches it
15k
15analysis-tools-dev/static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
15k
16OpenVPN/openvpn
OpenVPN is an open source VPN daemon
15k
17lint-staged/lint-staged
🚫💩 — Run tasks like formatters and linters against files staged in Git
15k
18phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
14k
19gitpod-io/gitpod
The developer platform for on-demand cloud development environments to create software faster and more securely.
14k
20PHP-CS-Fixer/PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
14k
21hadolint/hadolint
Dockerfile linter, validate inline bash, written in Haskell
13k
22SonarSource/sonarqube
Continuous Inspection
11k
23backnotprop/plannotator
The workspace to stay in the loop and on top of agents - shape, decide, plan, annotate, review code, share with team, and send all feedback to agents with one click.
10.0k
24modem-dev/hunk
Review-first terminal diff viewer for agentic coders
9.8k
25reviewdog/reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
9.7k
26checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
9.6k
27firezone/firezone
Blazing-fast remote access
9.2k
28securego/gosec
Go security checker
9.0k
29ViRb3/wgcf
🚤 Cross-platform, unofficial CLI for Cloudflare Warp
8.9k
30repowise-dev/repowise
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
8.1k
31sverweij/dependency-cruiser
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
7.4k
32lintsinghua/DeepAudit
DeepAudit:人人拥有的 AI 黑客战队,让漏洞挖掘触手可及。小白一键部署运行,自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ,一键生成报告。支持中转站。​让安全不再昂贵,让审计不再复杂。
7.3k
33presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
7.3k
34google/error-prone
Catch common Java mistakes as compile-time errors
7.3k
35meta/pyrefly
A fast type checker and language server for Python
7.2k
36meta/pyre-check
Performant type-checking for python.
7.2k
37detekt/detekt
Static code analysis for Kotlin
7.1k
38aquasecurity/tfsec
Tfsec is now part of Trivy
7.1k
39zizmorcore/zizmor
Static analysis for GitHub Actions (and more)
7.0k
40dominikh/go-tools
Staticcheck - The advanced Go linter
6.9k
41cppcheck-opensource/cppcheck
static analysis of C/C++ code
6.8k
42pre-commit/pre-commit-hooks
Some out-of-the-box hooks for pre-commit
6.7k
43ondrajz/go-callvis
Visualize call graph of a Go program using Graphviz
6.5k
44kucherenko/jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
6.5k
45crytic/slither
Static Analyzer for Solidity and Vyper
6.4k
46davidhalter/jedi
Awesome autocompletion, static analysis and refactoring library for python
6.2k
47AhmadHassan-BTed/OpenHeart
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
5.9k
48vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
5.9k
49pylint-dev/pylint
It's not just a linter that annoys you!
5.7k
50danger/danger
🚫 Stop saying "you forgot to …" in code review (in Ruby)
5.7k