Code Quality GitHub Repositories (2026) · Open Source Tools

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

Open-source AI-powered offensive security harness for automated penetration testing.

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.

A tool to stop JVM architecture drift before it reaches main. Configurable through yaml; no architecture test code.

Static analysis for the debt AI agents leave in PHP: 34 rules, Claude Code hooks, git-diff review, a Rector and Pint fix pass, Pest expectations, CI annotations and an MCP server. Deterministic, local, no LLM.

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.

Continuous Inspection

The strictest and most opinionated python linter ever!

Open-source meta-harness for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure.

Coverage, security and code quality for coding agents

Development workflows for Claude Code that keep broad exploration focused on the outcome you approved.

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

It's not just a linter that annoys you!

French-army-knife Toolbox for Salesforce. Orchestrates base commands and assist users with interactive wizards to make much more than native Salesforce CLI + Allows you to define a complete CI/CD Pipeline and Schedule a daily Metadata backup & monitoring of your orgs + AI-enhanced org Documentation

A tool to enforce Swift style and conventions.

A fast type checker and language server for Python

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language