SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Rust Code Quality Projects
-
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
AppSignal
AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
-
-
jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Project mention: Show HN: Jscpd start support type2/type3 clones | news.ycombinator.com | 2026-09-11 -
fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Project mention: Fallow: Deterministic codebase intelligence for TypeScript and JavaScript | news.ycombinator.com | 2026-06-22 -
-
sentrux
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
-
tach
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
agnix
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
Project mention: Show HN: Agnix – lint your AI agent configs (Claude.md, skills, MCP, hooks) | news.ycombinator.com | 2026-02-11 -
dupehound
Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.
Project mention: Show HN: Deterministic guardrails against AI duplicated code | news.ycombinator.com | 2026-07-01 -
fossil-mcp
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.
Project mention: Fossil MCP – Dead code detection for vibe-coded projects | news.ycombinator.com | 2026-02-10 -
debtmap
Technical debt and risk analyzer that predicts bug hotspots by combining cognitive complexity, pattern recognition, coverage gaps, information theory, and git history.
Project mention: Ask HN: Do you have any evidence that agentic coding works? | news.ycombinator.com | 2026-01-203. The solution isn't debt-free commits. The solution is measuring, prioritizing, and reducing only the highest risk tech debt - the equivalent of focusing on bottlenecks with performance profiling. Which code is high-risk? Where's the debt concentrated? Poorly-factored code with good test coverage is low-risk. Poorly-tested code in critical execution paths is high-risk. Your CI pipeline needs to check the debt automatically for you just like it needs to lint and check your tests pass.
I built https://github.com/iepathos/debtmap to solve this systematically for my projects. It measures technical debt density to prioritize risk, but more importantly for this discussion: it identifies the right context for an LLM to understand a problem without looking through the whole codebase. The output is designed to be used with an LLM for automated technical debt reduction. And because we're measuring debt before and after, we have a feedback loop - enabling the LLM to iterate effectively and see whether its refactoring had a positive impact or made things worse. That's the missing piece in most agentic workflows: measurement that closes the loop.
To your specific concern about shipping unreviewed code: I agree it's risky, but the review focus should shift from "is every line perfect" to "where are the structural risks, and are those paths well-tested?" If your code has low complexity everywhere, is well tested (always review tests), and passing everything, then ask yourself what you actually gain at that point from further investing your time over-engineering the lesser tech debt away? You can't eliminate all tech debt, but you can keep it from compounding in the places that matter.
-
Project mention: Show HN: CodeDiff – Fast (<100ms), robust (99.95%) syntax-aware code diff | news.ycombinator.com | 2026-09-29
-
Project mention: AI coding agents: everyone harnesses the agent's loop. Here's the human's. | dev.to | 2026-07-17
Execution and harnessed, productized enforcement for builds. This corner is real and mature: Husky, Lefthook, pre-commit, Trunk, GitHub branch protection, on top of the underlying primitives (git, Claude Code hooks, CI). These don't hope your code is clean. They refuse the commit, fail the build, block the merge until it is. Enforcement isn't exotic. It's a solved, shipping product category.
-
Project mention: Show HN: CodeEraser – a deterministic judge of LLM-induced code and doc entropy | news.ycombinator.com | 2026-09-08
-
poly
Universal zero-dependency linter and formatter. One pure-Rust binary (poly) that lints and formats ~30 languages in-process — ruff, oxc, biome, mago and more compiled in — with a tree-sitter tier for the long tail. One config, git hooks, and an MCP server for agents. (by Goldziher)
Project mention: Deleting the toolchain: linting a polyglot monorepo with one Rust binary | dev.to | 2026-07-04Source and docs are at github.com/Goldziher/polylint. If you run a polyglot repo and your pre-commit config has quietly become its own maintenance project, point poly lint at it and see what falls out.
-
Project mention: Show HN: Rust Doctor, a code health scanner for Cargo workspaces | news.ycombinator.com | 2026-08-19
-
Project mention: Bonsai-lint – A multi-language cognitive complexity linter | news.ycombinator.com | 2026-09-30
I work across several languages in the same monorepo and couldn't find a linter that scored cognitive complexity consistently across all of them. I also needed full support for Vue.js SFCs, which most linters ignore.
I wrote bonsai-lint to fix this. It's a single Rust binary that parses your code (never executes it) to calculate a unified complexity score across Go, Java, Python, PHP, JS/TS, and Vue SFCs.
It's proven especially useful when paired with AI agents. Having a strict complexity target enabled me to prompt AI agents to refactor bloated, messy functions into much cleaner, readable ones.
Browser Playground: https://bonsai.kauneckas.dev/play/
GitHub: https://github.com/ryckakas/bonsai-lint
I'd love to hear your feedback, especially if you spot any scores that feel inaccurate.
-
baseline
Enforce architectural decisions AI coding tools keep ignoring — bans, ratchets, and design system rules in a single Rust binary (by stewartjarod)
Project mention: Show HN: Baseline – enforce team decisions ESLint can't express | news.ycombinator.com | 2026-02-22 -
gitsloth
Lightweight Rust CLI that turns staged Git diffs into clean Conventional Commit messages with OpenAI, then lets you pick, copy, or commit in one step
Project mention: I built a tiny CLI that writes my commit messages from Git diff | news.ycombinator.com | 2026-03-27 -
Languages: Python (from hive), TypeScript (from oh-my-pi), Rust (from irradiate)
-
cxcap
A complexity feedback loop for AI coding agents: a local, read-only CLI that shows which files, dependents, cycles and hotspots a change will touch before you or your agent make it. Python, JS/TS, Rust.
Project mention: Your coding agent passed every test. It may still have made the next change harder. | dev.to | 2026-09-21Repo: https://github.com/moonlettai/cxcap
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Rust Code Quality discussion
Rust Code Quality related posts
-
Sentrux: Codebase Architectural Sensor
-
Show HN: Deterministic guardrails against AI duplicated code
-
Fallow: Deterministic codebase intelligence for TypeScript and JavaScript
-
Fallow – Deterministic codebase intelligence for TypeScript and JavaScript
-
Show HN: Deterministic and offline duplicate-code detector
-
Finding code duplicated by AI without AI
-
Show HN: Shamefile – Enforce docs for linter bypasses
-
A note from our sponsor - SaaSHub
www.saashub.com | 11 Oct 2026
Index
What are some of the best open-source Code Quality projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | static-analysis | 14,832 |
| 2 | pyrefly | 7,078 |
| 3 | jscpd | 6,369 |
| 4 | fallow | 5,027 |
| 5 | typos | 4,176 |
| 6 | sentrux | 3,315 |
| 7 | tach | 2,835 |
| 8 | piranha | 2,492 |
| 9 | bencher | 910 |
| 10 | agnix | 446 |
| 11 | dupehound | 96 |
| 12 | fossil-mcp | 68 |
| 13 | debtmap | 68 |
| 14 | omnidiff | 50 |
| 15 | toolbox | 33 |
| 16 | CodeEraser | 21 |
| 17 | poly | 19 |
| 18 | rust-doctor | 18 |
| 19 | bonsai-lint | 12 |
| 20 | baseline | 9 |
| 21 | gitsloth | 8 |
| 22 | irradiate | 6 |
| 23 | cxcap | 2 |
Sponsored
AppSignal knows why the f*#k it crashed.
Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
www.appsignal.com