⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
Updated
Oct 14, 2026 - Rust
Automate your code review with style, quality, security, and test‑coverage checks when you need them most. Code quality is intended to keep complexity down and runtime up.
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
A fast type checker and language server for Python
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
A tool for refactoring code related to feature flag APIs
Enforced QA for Claude Code, Codex and Copilot. Draw the graph: code review, your own reviewers and test agents, any model per node. Slop goes back to repair, and the agent that wrote the code can't skip it.
🐰 Bencher - Continuous Benchmarking
Blazingly fast cognitive complexity analysis for Python, written in Rust.
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
Change Risk Anti-Patterns (CRAP) metric for Rust projects
Maintainer-governed agent for evidence-backed open-source contribution proposals
Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality. 14 SQL dialects. Offline. CI/CD ready.
Native, local-first knowledge graph engine for code and project artifacts—inspired by Graphify, built in Rust, and evolving beyond it.
Coverage, security and code quality for coding agents
Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.
Technical debt and risk analyzer that predicts bug hotspots by combining cognitive complexity, pattern recognition, coverage gaps, information theory, and git history.
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.
CommitCheck ensures your commit messages are consistent and contain all required information
Automatic cleaning of code
Detect flaky tests, quantify CI waste in dollars, and auto-fix with AI. For GitHub Actions teams
Automatically fix pull requests to increase developer productivity
ABAP quality assurance and static analysis
an add-on to github actions which allows safely pushing changes back to pull requests
AI Code Review Platform
Stop merging code you don't fully understand
Advanced static analysis for automatically finding runtime errors in JavaScript, TypeScript, React, and Vue code
Code scanning at ludicrous speed. Find bugs and reachable dependency vulnerabilities. Enforce standards on every commit
Apply size labels to Pull Requests based on the total lines of code changed
Codacy helps to build effortless code quality and security for developers
Code quality and coverage done right
Catch more Python and Django bugs during code review
A software engineering intelligence tool tool to identify and prioritize technical debt and evaluate your efficiency