usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
A star delta has been computed for 61,465 of 62,212 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 17:05 and 08:08 (BKK).
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Open-source AI-powered offensive security harness for automated penetration testing.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
Open-source meta-harness for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure.
A fast type checker and language server for Python
Continuous Inspection
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Discover the best developers — and become one. Drop a GitHub handle for a 0–100 value & trust score in 30s: see your gaps, discover top devs, get found. Exposes PR farmers, AI bots & fork-hoarders. Deterministic scoring, self-hostable.
🚀 AI-powered code review tool for GitHub, GitLab, Bitbucket Cloud, Bitbucket Server, Azure DevOps and Gitea — built with LLMs like OpenAI, Claude, Gemini, Ollama, Bedrock, OpenRouter and Azure OpenAI
Semantic code and security scanner
Combination of multiple linters to run as a GitHub Action or standalone
Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks, and more. 50+ deterministic rules across 10 language targets, with CLI, CI, and GitHub Actions. No LLM at runtime. MIT.
A static analyzer for Java, C, C++, and Objective-C
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
A tool for refactoring code related to feature flag APIs
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
It's not just a linter that annoys you!
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
🐰 Bencher - Continuous Benchmarking
Official SonarQube MCP Server for code quality and security in AI agents
⚙️ The static code analysis tool you need for your HTML
The strictest and most opinionated python linter ever!
Agentic development harness for Claude Code — SPEC-driven plan/run/sync, TRUST 5 quality gates, model+effort routing, and Claude×GLM multi-LLM cost control. Single Go binary, 16 languages, zero deps.
MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.
Showing 30 of 84 repositories
