SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Rust Static Analysis Projects
-
Project mention: Why Go Is an Ideal Language for AI-Assisted Software Engineering | news.ycombinator.com | 2026-08-11
But you're probably better off with Ruff these days: https://docs.astral.sh/ruff/
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
The previous post covered how we structured the codebase: Effect conventions, ast-grep enforcement, Drift, and CLAUDE.md to collaborate with Claude Code. You describe what you want, review the output, iterate. That works well. This post is about what happens when you step away entirely: giving the agent a list of issues and letting it work through them while you do something else. In autonomous mode, there's no mid-session correction. Anything the enforcement layer doesn't catch compounds across commits which is why clean issue tracking, issue review and end-of-session QA matter more, not less.
-
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
Project mention: GitHub is investigating unauthorized access to their internal repositories | news.ycombinator.com | 2026-05-19
-
-
fallow
Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.
Project mention: Fallow: Deterministic codebase intelligence for TypeScript and JavaScript | news.ycombinator.com | 2026-06-22 -
mago
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Mago does the same for PHP now, running a linter, a formatter, and a static analyzer in one Rust binary fast enough to run on every keystroke.
-
qlty
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Project mention: Top Static Code Analysis Tools Every Developer Should Know in 2026 | dev.to | 2026-06-22curl -fsSL https://qlty.sh/install | bash qlty init qlty check .
-
Project mention: Flowistry: An IDE plugin for Rust that focuses on relevant code | news.ycombinator.com | 2025-10-18
Explained in README: https://github.com/willcrichton/flowistry#why-isnt-flowistry...
-
-
sentrux
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
Project mention: Sentrux – AI keeps writing bad code. Built a feedback sensor that grades it live | news.ycombinator.com | 2026-03-12 -
-
-
-
slowql
Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality. 14 SQL dialects. Offline. CI/CD ready.
Project mention: SlowQL – stop bad SQL before it reaches production | news.ycombinator.com | 2026-03-09- Quality (30 rules): naming, deprecated syntax, style
171 rules total. 873 tests. Zero telemetry. Your SQL never leaves your machine.
pip install slowql && slowql
I spent serious time on the terminal experience — health score gauge, severity heat map, keyboard navigation. It sounds like a detail but it drives actual adoption.
GitHub: https://github.com/makroumi/slowql
-
phanalist
Performant static analyzer for PHP, which is extremely easy to use. It helps you catch common mistakes in your PHP code.
-
-
l3x
AI-driven Static Analyzer. Supports Rust and Smart contracts: Solana based on Rust, Ethereum based on Solidity.
-
cpplumber
Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects
-
dupehound
Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.
Project mention: Show HN: Deterministic guardrails against AI duplicated code | news.ycombinator.com | 2026-07-01 -
treeedb
Generate Soufflé Datalog types, relations, and facts that represent ASTs from a variety of programming languages.
-
-
fossil-mcp
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.
Project mention: Fossil MCP – Dead code detection for vibe-coded projects | news.ycombinator.com | 2026-02-10
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Rust Static Analysis discussion
Rust Static Analysis related posts
-
AI Coding Tip 027 - Force Code Standards
-
Top Static Code Analysis Tools Every Developer Should Know in 2026
-
Coding is solved. The factory isn't.
-
A curated list of static analysis (SAST) tools
-
Static Analysis for GitHub Actions
-
Your Docs Are Likely Obsolete
-
Fil-Qt: A Qt Base build with Fil-C experience
-
A note from our sponsor - SaaSHub
www.saashub.com | 14 Aug 2026
Index
What are some of the best open-source Static Analysis projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | ruff | 49,106 |
| 2 | ast-grep | 15,504 |
| 3 | static-analysis | 14,715 |
| 4 | zizmor | 6,013 |
| 5 | binsider | 4,379 |
| 6 | fallow | 4,323 |
| 7 | mago | 3,375 |
| 8 | qlty | 3,118 |
| 9 | flowistry | 3,070 |
| 10 | pylyzer | 2,860 |
| 11 | sentrux | 2,637 |
| 12 | crepe | 529 |
| 13 | debugoff | 336 |
| 14 | fta | 330 |
| 15 | slowql | 220 |
| 16 | phanalist | 161 |
| 17 | datadog-static-analyzer | 138 |
| 18 | l3x | 94 |
| 19 | cpplumber | 91 |
| 20 | dupehound | 87 |
| 21 | treeedb | 85 |
| 22 | enderpy | 83 |
| 23 | fossil-mcp | 65 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com