SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Code Quality Open-Source Projects
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Project mention: Keploy – Traffic-Based Automated API Test Generator | news.ycombinator.com | 2026-03-31 -
-
Project mention: A rogue AI led to a serious security incident at Meta | news.ycombinator.com | 2026-03-20
-
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
-
-
Automated analysis tools: SonarQube, CodeClimate, and Codacy detect code-level debt automatically: cyclomatic complexity, code duplication, dependency staleness, and coverage gaps. These tools supplement but don't replace the architectural and business-logic debt that requires human judgment to identify and document.
-
super-linter
Combination of multiple linters to run as a GitHub Action or standalone (by super-linter)
-
reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
github.com - reviewdog/reviewdog
-
-
Checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Added guard rails: Added unit and integration tests, added auto code formatting with spotless, added code analysis using checkstyle
-
Project mention: Enhanced Kotlin Code Quality Reporting with the Gradle Problems API | dev.to | 2025-08-04
In my Google Summer of Code 2025 project, Enhanced Kotlin Code Quality Reporting with the Gradle Problems API, I built a proof of concept integration into Detekt. (The PR is in code review)
-
-
DeepAudit
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
Project mention: Show HN: DeepAudit – open-source auditing agent (LLMs and Static Analysis) | news.ycombinator.com | 2025-12-15 -
state-of-the-art-shitcode
💩State-of-the-art shitcode principles your project should follow to call it a proper shitcode
-
-
jscpd
Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.
Project mention: Add a 50x+ faster duplicate-code gate to GitHub Actions with jscpd-rs | dev.to | 2026-06-04This post shows how to add a fast duplicate-code gate to GitHub Actions with jscpd-rs, a native Rust implementation of the common jscpd workflow.
-
-
A team I was talking to had built a code-review skill in Claude Code. It looked good: a careful prompt, a set of rules, and examples. Then it shipped a PR with a nested recursive loop inside another recursive loop. Cyclomatic complexity any static analyser (PMD, radon, ESLint's complexity rule) would have flagged in milliseconds. The skill missed it.
-
-
SimpleCov
Code coverage for Ruby with a powerful configuration library and automatic merging of coverage across test suites
-
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Code Quality discussion
Code Quality related posts
-
Your AI agent's diff looks fine. That's the problem.
-
Show HN: CLI tool for detecting non-exact code duplication with embedding models
-
Show HN: Deterministic guardrails against AI duplicated code
-
Show HN: AST-guard A gradient-immune structural guard against RL reward hacking
-
AINAScan Found Two Security Bugs in a Real Open-Source App — Here Is What Happened
-
I scanned FastAPI's tutorial examples. Here's what I found.
-
Fallow: Deterministic codebase intelligence for TypeScript and JavaScript
-
A note from our sponsor - SaaSHub
www.saashub.com | 11 Jul 2026
Index
What are some of the best open-source Code Quality projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | SwiftLint | 19,658 |
| 2 | keploy | 17,967 |
| 3 | Modern-CPP-Programming | 15,885 |
| 4 | infer | 15,661 |
| 5 | static-analysis | 14,655 |
| 6 | Flex | 14,611 |
| 7 | awesome-guidelines | 10,937 |
| 8 | SonarQube | 10,757 |
| 9 | super-linter | 10,515 |
| 10 | reviewdog | 9,435 |
| 11 | chisel | 9,181 |
| 12 | Checkstyle | 8,961 |
| 13 | detekt | 6,987 |
| 14 | pyrefly | 6,743 |
| 15 | DeepAudit | 6,591 |
| 16 | state-of-the-art-shitcode | 6,190 |
| 17 | eslint-plugin-import | 5,929 |
| 18 | jscpd | 5,833 |
| 19 | Pylint | 5,697 |
| 20 | PMD | 5,442 |
| 21 | MLeaksFinder | 5,437 |
| 22 | SimpleCov | 4,907 |
| 23 | GrumPHP | 4,300 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com