code-quality

usestrix/strix

+1.4k

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

openqodex

+235

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.

keploy/keploy

+184

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

repowise

+162

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

fallow

+51

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

sloppy

+32

Static analysis for the debt AI agents leave in PHP: 34 rules, Claude Code hooks, git-diff review, a Rector and Pint fix pass, Pest expectations, CI annotations and an MCP server. Deterministic, local, no LLM.

CyberStrike

+63

Open-source AI-powered offensive security harness for automated penetration testing.

meta/pyrefly

+37

A fast type checker and language server for Python

zeroshot

+27

Open-source meta-harness for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure.