Static Code Analysis GitHub Repositories (2026) · Open Source Tools

An extremely fast Python linter and code formatter, written in Rust.

Go security checker

A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

It's not just a linter that annoys you!

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

A new version of Soot with a completely overhauled architecture

PHP Static Analysis Tool - discover bugs in your code without running it!

🔥 Fast, strict, configurable, extensible, and beautiful linter for Go

⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle

CodeCharta is a visualization tool that transforms complex software architecture and code metrics into interactive, customizable visual maps, empowering everyone to communicate and analyze your codebase. Improve code quality, maintainability, and architectural decisions

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

A Ruby static code analyzer and formatter, based on the community Ruby style guide.

Manage translation and localization with static analysis, for Ruby i18n

A RuboCop extension focused on enforcing Rails best practices and coding conventions.

🐊 Pluggable and configurable JavaScript Linter, code transformer and formatter with superpowers 💪: built-in support of js, jsx, ts, markdown, yaml, toml, json and ignore. Write declarative codemods in a simplest possible way 😏

Lint checks to aid with a healthy adoption of Compose

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

Jenkins Warnings Plugin - Next Generation

Standalone static analysis for ABAP