Data / Repositories / Code quality
Code quality repositories on GitHub: 14 ranked by stars
14 public repositories tagged Code quality are on GitHub, with 126,670 stars between them; 13 had a push in the last 30 days. Most are written in Rust (4), TypeScript (3), Python (2). The most starred: usestrix/strix (68,539), analysis-tools-dev/static-analysis (14,830), super-linter/super-linter (10,616).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | Python | 68,539 | 7,595 | Apache-2.0 | Oct 14 | Oct 14 |
| analysis-tools-dev/static-analysis | A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality. | Rust | 14,830 | 1,515 | MIT | Oct 9 | Oct 11 |
| super-linter/super-linter | Combination of multiple linters to run as a GitHub Action or standalone | Shell | 10,616 | 1,080 | MIT | Oct 9 | Oct 11 |
| facebook/pyrefly | A fast type checker and language server for Python | Rust | 7,077 | 543 | MIT | Oct 10 | Oct 11 |
| kucherenko/jscpd | Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents. | Rust | 6,392 | 269 | MIT | Oct 14 | Oct 14 |
| pylint-dev/pylint | It's not just a linter that annoys you! | Python | 5,735 | 1,381 | GPL-2.0 | Oct 10 | Oct 11 |
| CyberStrikeus/CyberStrike | Open-source AI-powered offensive security harness for automated penetration testing. | TypeScript | 3,148 | 516 | AGPL-3.0 | Oct 14 | Oct 14 |
| oxsecurity/megalinter | MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action… | Dockerfile | 2,611 | 313 | AGPL-3.0 | Oct 11 | Oct 11 |
| mattzcarey/shippie | extendable code review and QA agent | TypeScript | 2,509 | 243 | MIT | Sep 28 | Oct 14 |
| uber/piranha | A tool for refactoring code related to feature flag APIs | Rust | 2,492 | 211 | Apache-2.0 | Apr 2 | Oct 11 |
| jakzal/phpqa | Docker image that provides static analysis tools for PHP | Dockerfile | 1,321 | 67 | MIT | Oct 5 | Oct 11 |
| openqodex/openqodex | Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key. | TypeScript | 709 | 56 | Apache-2.0 | Oct 15 | Oct 15 |
| SonarSource/sonarqube-mcp-server | Official SonarQube MCP Server for code quality and security in AI agents | Java | 664 | 103 | Oct 14 | Oct 14 | |
| gregkozakiewicz/roast-my-design-system | AI design system scanner + mcp server. Scores repos 0-100, writes fix prompts. 27K+ npm downloads. | JavaScript | 27 | 1 | MIT | Oct 5 | Oct 14 |
By language
- Rust 4
- TypeScript 3
Related topics
- Linter 7
- Static analysis 6
- Security 5
- Agents 4
- MCP 4
- AI security 2
- Artificial intelligence 2
- Bug bounty 2
- Cybersecurity 2
- Hacking 2
- LLM security 2
- Penetration testing 2
Read from GitHub by SpecStream between October 11, 2026 and October 15, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.