SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Code Quality Open-Source Projects
-
would love it to see it h2h against https://github.com/usestrix/strix (45k stars)
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
-
keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Project mention: testcontainers-go VS keploy - a user suggested alternative | libhunt.com/r/testcontainers-go | 2026-10-13Keploy - open-source AI API testing and test generation tool. Automatically generates test cases and data mocks from real traffic - no coding required. A lightweight integration testing alternative to Testcontainers.
-
-
Project mention: A rogue AI led to a serious security incident at Meta | news.ycombinator.com | 2026-03-20
-
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
Automated analysis tools: SonarQube, CodeClimate, and Codacy detect code-level debt automatically: cyclomatic complexity, code duplication, dependency staleness, and coverage gaps. These tools supplement but don't replace the architectural and business-logic debt that requires human judgment to identify and document.
-
super-linter
Combination of multiple linters to run as a GitHub Action or standalone (by super-linter)
-
reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
github.com - reviewdog/reviewdog
-
Checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Added guard rails: Added unit and integration tests, added auto code formatting with spotless, added code analysis using checkstyle
-
-
DeepAudit
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
Project mention: Show HN: DeepAudit – open-source auditing agent (LLMs and Static Analysis) | news.ycombinator.com | 2025-12-15 -
-
-
jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Project mention: Show HN: Jscpd start support type2/type3 clones | news.ycombinator.com | 2026-09-11 -
state-of-the-art-shitcode
💩State-of-the-art shitcode principles your project should follow to call it a proper shitcode
-
https://github.com/import-js/eslint-plugin-import/blob/HEAD/...
It's not built in to ESLint, but it's fairly widely used in my experience and helps ensure that you've got a sensible split between production and non-production.
-
-
A team I was talking to had built a code-review skill in Claude Code. It looked good: a careful prompt, a set of rules, and examples. Then it shipped a PR with a nested recursive loop inside another recursive loop. Cyclomatic complexity any static analyser (PMD, radon, ESLint's complexity rule) would have flagged in milliseconds. The skill missed it.
-
-
fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Project mention: Fallow: Deterministic codebase intelligence for TypeScript and JavaScript | news.ycombinator.com | 2026-06-22 -
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Code Quality discussion
Code Quality related posts
-
Perch – A Semantic Linter
-
How I score the health of a Node.js API in one command
-
Show HN: RepoGuard – Fast Architecture Guardrails for Claude and Cursor via MCP
-
How to Stop Cursor and Claude Code from Breaking Clean Architecture in 12ms published: true
-
Show HN: RepoGuard – Architecture linter for AI-generated code (Cursor, Claude)
-
The Design Already Made It Part of the Job
-
ImpactGate: A merge gate that scores the structural decay AI adds
-
A note from our sponsor - SaaSHub
www.saashub.com | 14 Oct 2026
Index
What are some of the best open-source Code Quality projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | strix | 67,417 |
| 2 | SwiftLint | 19,754 |
| 3 | keploy | 18,545 |
| 4 | Modern-CPP-Programming | 16,208 |
| 5 | infer | 15,716 |
| 6 | static-analysis | 14,832 |
| 7 | Flex | 14,639 |
| 8 | awesome-guidelines | 11,162 |
| 9 | SonarQube | 11,061 |
| 10 | super-linter | 10,615 |
| 11 | reviewdog | 9,641 |
| 12 | Checkstyle | 9,594 |
| 13 | chisel | 9,178 |
| 14 | DeepAudit | 7,125 |
| 15 | detekt | 7,087 |
| 16 | pyrefly | 7,078 |
| 17 | jscpd | 6,369 |
| 18 | state-of-the-art-shitcode | 6,207 |
| 19 | eslint-plugin-import | 5,948 |
| 20 | Pylint | 5,735 |
| 21 | PMD | 5,500 |
| 22 | MLeaksFinder | 5,432 |
| 23 | fallow | 5,027 |
Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com