static-code-analysis

semgrep

+138

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

astral-sh/ruff

+117

An extremely fast Python linter and code formatter, written in Rust.

eslint/eslint

+35

Find and fix problems in your JavaScript code.

biomejs/biome

+33

A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

PyCQA/bandit

+26

Bandit is a tool designed to find common security issues in Python code.

reviewdog

+18

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

checkstyle

+9

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

pmd/pmd

+8

An extensible multilanguage static code analyzer.

securego/gosec

+8

Go security checker