linter
Find and fix problems in your JavaScript code. Pluggable JavaScript Linter.
ESLint is a tool for identifying and reporting on patterns found in ECMAScript/JavaScript code. In many ways, it is similar to JSLint and JSHint with a few exceptions:
Related contents:
a dockerfile linter that actually has opinions 🔥. 85 Rules, Instant Results.
a dockerfile linter that actually has opinions. it catches bad practices and tells you about them in the least diplomatic way possible.
think of it as code review from a senior dev who's seen too many prod incidents and has stopped being polite about it.
Related contents:
Guard rail for your commit messages for sustainable development.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Related contents:
EPUBCheck is a command line tool. Unzip the downloaded package, open a terminal program, and start checking your EPUB files!
Related contents:
An ESLint plugin to disable mutation and promote functional programming in JavaScript and TypeScript.
Check your AWS CLI commands for security risks before you run them.
Security linter for AWS CLI commands. Catches misconfigurations before they hit your cloud.
703 security checks across 91 AWS services. Findings include severity ratings and a remediated command.
Related contents:
check for a database transaction that silently leaked operations outside its boundary in go.
Related contents:
A production-grade, zero-configuration preset for
Ultracite is a zero-config preset for ESLint, Biome, and Oxlint that helps teams and AI write consistent, type-safe code.
Semgrep Pro Rules to ensure code using LLMs is following best practices.
Semgrep rules that catch common trust & safety mistakes in LLM-powered applications. Scan any codebase in seconds to find hardcoded API keys, missing safety checks, prompt injection risks, and unhandled errors across all major AI providers.
Catch cloud waste before it ships. Shift-left cloud hygiene engine for AWS and Azure. Catch waste in CI - read-only, deterministic, zero telemetry.
Like tfsec for Terraform or trivy for containers — CleanCloud finds orphaned resources in AWS and Azure and enforces hygiene gates in your CI/CD pipeline before waste reaches production.
Related contents:
🚀 Go Faster. Go Typed.
Think of Rslint as Rust Clippy but for TypeScript — more like a TypeScript extension than an ESLint plugin.
Rslint is a high-performance JavaScript and TypeScript linter written in Go. It offers strong compatibility with the ESLint and TypeScript-ESLint ecosystem, allowing for seamless replacement, and provides lightning-fast linting speeds.
A modular SQL linter and auto-formatter with support for multiple dialects and templated code.
SQLFluff is an open source, dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with Jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.
Make your Dockerfile proud of itself.
Dockadvisor is a free online Dockerfile analyzer that helps you write better, more efficient Docker configurations. Paste your Dockerfile to get instant feedback on best practices, issues, and optimization opportunities.
The Oxidized PHP Toolchain. A blazing fast linter, formatter, and static analyzer for PHP, written in Rust.
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Related contents:
OpenAPI Linter: The worlds fastest OpenAPI quality tool.
vacuum is the worlds fastest OpenAPI 3, OpenAPI 2 / Swagger linter and quality analysis tool. Built in go, it tears through API specs faster than you can think. vacuum is compatible with Spectral rulesets and generates compatible reports.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. It automates the process of checking Java code to spare humans of this boring (but important) task. This makes it ideal for projects that want to enforce a coding standard.
The JavaScript Oxidation Compiler.
A collection of JavaScript tools written in Rust.
Related contents:
An extremely fast Python type checker, written in Rust.
Related contents:
FTA (Fast TypeScript Analyzer) is a super-fast TypeScript static analysis tool written in Rust. It captures static information about TypeScript code and generates easy-to-understand analytics that tell you about complexity and maintainability issues that you may want to address.
pglinter is a PostgreSQL extension that analyzes your database for potential issues, performance problems, and best practice violations. Written in Rust using pgrx, it provides deep integration with PostgreSQL for efficient database analysis.
Catch unnecessary React useEffect hooks to make your code simpler, faster, and safer.
ESLint plugin to catch unnecessary React useEffects to make your code easier to follow, faster to run, and less error-prone. Highly recommended for new React developers as you learn its mental model, and even experienced developers may be surprised.
Linting tool for CloudFormation templates. The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure.
Related contents:
Golangci-lint is a fast linters runner for Go
It runs linters in parallel, uses caching, supports YAML configuration, integrates with all major IDEs, and includes over a hundred linters.
Related contents:
Tired of pushing to test your .gitlab-ci.yml?
Run gitlab pipelines locally as shell executor or docker executor. Get rid of all those dev specific shell scripts and make files.
Validate and Run GitHub Actions locally.
WRKFLW is a powerful command-line tool for validating and executing GitHub Actions workflows locally, without requiring a full GitHub environment. It helps developers test their workflows directly on their machines before pushing changes to GitHub.
Related contents:
tfclean is tool to remove applied moved block, import block, …
tfclean is a tool for cleaning up Terraform configuration files by automatically removing applied moved, import, and removed blocks. This helps maintain clean and readable Terraform configurations by eliminating blocks that have already served their purpose.
🧙♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.
Experience the full power of TypeScript inference to boost productivity for your full-stack application.
tRPC allows you to easily build & consume fully typesafe APIs without schemas or code generation.
Related contents:
mbake is a Makefile formatter and linter. It only took 50 years!
An extremely fast Python type checker and language server, written in Rust.
Related contents:
The tooling that enables ESLint and Prettier to support TypeScript.
Related contents:
An extremely fast Python linter and code formatter, written in Rust.
Related contents:
Analysis Tools and Linters to Improve Code Quality and Avoid Bugs
We list the best static analysis tools and linters that can help you improve code quality. All tools are peer-reviewed by fellow engineers. Avoid bugs in production, outages, and angry customers.
Harper is an English grammar checker designed to be just right. I created it after years of dealing with the shortcomings of the competition.
Related contents:
Kubernetes Live Cluster Linter. A Kubernetes cluster resource sanitizer.
Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestrate a cluster. Popeye scans your cluster based on what’s deployed and not what’s sitting on disk. By linting your cluster, it detects misconfigurations, stale resources and assists you to ensure that best practices are in place, thus preventing future headaches. It aims at reducing the cognitive overload one faces when operating a Kubernetes cluster in the wild. Furthermore, if your cluster employs a metric-server, it reports potential resources over/under allocations and attempts to warn you should your cluster run out of capacity.
validate the structure of your container images.
The Container Structure Tests provide a powerful framework to validate the structure of a container image. These tests can be used to check the output of commands in an image, as well as verify metadata and contents of the filesystem.
Related contents:
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
Next-gen Python tooling. Fast, unified, futuristic
Astral’s mission is to make the Python ecosystem more productive by building high-performance developer tools, starting with Ruff.
Pretty fast linter (code static analysis utility) for PHP. NoVerify is a PHP linter: it finds possible bugs and style violations in your code.
The JavaScript Oxidation Compiler. A collection of JavaScript tools written in Rust.
The Oxidation Compiler is creating a collection of high-performance tools for JavaScript and TypeScript. Oxc is building a parser, linter, formatter, transpiler, minifier, resolver ... all written in Rust.
One toolchain for your web project. Format, lint, and more in a fraction of a second.
Biome is a performant toolchain for web projects, it aims to provide developer tools to maintain the health of said projects.
Biome is a fast formatter for JavaScript, TypeScript, JSX, and JSON that scores 96% compatibility with Prettier.
Biome is a performant linter for JavaScript, TypeScript, and JSX that features more than 170 rules from ESLint, TypeSCript ESLint, and other sources. It outputs detailed and contextualized diagnostics that help you to improve your code and become a better programmer!
Related contents:
Tools for building custom lint rules.
💡 Easily write powerful Dart & Flutter lint rules for your projects or for users of your packages.
An extensible multilanguage static code analyzer.
PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query.
A PHP code-quality tool.
When somebody commits changes, GrumPHP will run some tests on the committed code. If the tests fail, you won't be able to commit your changes. This handy tool will not only improve your codebase, it will also teach your co-workers to write better code following the best practices you've determined as a team.
scissors Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Put your architectural rules under test!
PHPArkitect helps you to keep your PHP codebase coherent and solid, by permitting to add some architectural constraint check to your workflow. You can express the constraint that you want to enforce, in simple and readable PHP code, for example:
Test and enforce architectural rules in your Laravel applications. Keep your app's architecture clean and consistent!
Laravel Arkitect lets you test and enforce your architectural rules in your Laravel applications, and it's a PHPArkitect wrapper for Laravel. This package helps you to keep your app's architecture clean and consistent.
Dockerfile linter, validate inline bash, written in Haskell.
A smarter Dockerfile linter that helps you build best practice Docker images. The linter parses the Dockerfile into an AST and performs rules on top of the AST. It stands on the shoulders of ShellCheck to lint the Bash code inside RUN instructions.
Super-fast Runtime validator (type checker) with only one line.
typia is a transformer library of TypeScript, supporting below features:
- Super-fast Runtime Validators
- Safe JSON parse and fast stringify functions
- JSON schema generator
- Random data generator
Discover vulnerabilities across a codebase with CodeQL, our industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same.
Automatically apply Tighten's default code style for Laravel apps.
Automatic configuration for Laravel apps to apply Tighten's standard linting & code standards.
TypeScript type checker written in Rust.
This project is in an early stage and it's under active development. Any help would be really appreciated. If you want to help this project successfully launch, please consider contributing developer time or supporting us financially.
Unified developer tools for JavaScript, TypeScript, and the web.
Rome unifies your development stack by combining the functionality of separate tools. Single configuration file, amazing performance, and works with any stack.
The Ruby Linter/Formatter that Serves and Protects.
RuboCop is a Ruby code style checker (linter) and formatter based on the community-driven Ruby Style Guide.
Related contents:
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language. reviewdog provides a way to post review comments to code hosting service, such as GitHub, automatically by integrating with any linter tools with ease. It uses an output of lint tools and posts them as a comment if findings are in diff of patches to review.