linter
OpenAPI Linter: The worlds fastest OpenAPI quality tool.
vacuum is the worlds fastest OpenAPI 3, OpenAPI 2 / Swagger linter and quality analysis tool. Built in go, it tears through API specs faster than you can think. vacuum is compatible with Spectral rulesets and generates compatible reports.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Related contents:
The Ruby Linter/Formatter that Serves and Protects.
RuboCop is a Ruby code style checker (linter) and formatter based on the community-driven Ruby Style Guide.
Related contents:
Tools for building custom lint rules.
💡 Easily write powerful Dart & Flutter lint rules for your projects or for users of your packages.
Unified developer tools for JavaScript, TypeScript, and the web.
Rome unifies your development stack by combining the functionality of separate tools. Single configuration file, amazing performance, and works with any stack.
Pretty fast linter (code static analysis utility) for PHP. NoVerify is a PHP linter: it finds possible bugs and style violations in your code.
🚀 Go Faster. Go Typed.
Think of Rslint as Rust Clippy but for TypeScript — more like a TypeScript extension than an ESLint plugin.
Rslint is a high-performance JavaScript and TypeScript linter written in Go. It offers strong compatibility with the ESLint and TypeScript-ESLint ecosystem, allowing for seamless replacement, and provides lightning-fast linting speeds.
validate the structure of your container images.
The Container Structure Tests provide a powerful framework to validate the structure of a container image. These tests can be used to check the output of commands in an image, as well as verify metadata and contents of the filesystem.
Related contents:
Linting tool for CloudFormation templates. The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure.
Related contents:
tfclean is tool to remove applied moved block, import block, …
tfclean is a tool for cleaning up Terraform configuration files by automatically removing applied moved, import, and removed blocks. This helps maintain clean and readable Terraform configurations by eliminating blocks that have already served their purpose.
An extremely fast Python linter and code formatter, written in Rust.
Related contents:
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. It automates the process of checking Java code to spare humans of this boring (but important) task. This makes it ideal for projects that want to enforce a coding standard.
An ESLint plugin to disable mutation and promote functional programming in JavaScript and TypeScript.
An extremely fast Python type checker, written in Rust.
Related contents:
Put your architectural rules under test!
PHPArkitect helps you to keep your PHP codebase coherent and solid, by permitting to add some architectural constraint check to your workflow. You can express the constraint that you want to enforce, in simple and readable PHP code, for example:
Check your AWS CLI commands for security risks before you run them.
Security linter for AWS CLI commands. Catches misconfigurations before they hit your cloud.
703 security checks across 91 AWS services. Findings include severity ratings and a remediated command.
Related contents:
EPUBCheck is a command line tool. Unzip the downloaded package, open a terminal program, and start checking your EPUB files!
Related contents:
Harper is an English grammar checker designed to be just right. I created it after years of dealing with the shortcomings of the competition.
Related contents:
A PHP code-quality tool.
When somebody commits changes, GrumPHP will run some tests on the committed code. If the tests fail, you won't be able to commit your changes. This handy tool will not only improve your codebase, it will also teach your co-workers to write better code following the best practices you've determined as a team.
A modular SQL linter and auto-formatter with support for multiple dialects and templated code.
SQLFluff is an open source, dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with Jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.
The JavaScript Oxidation Compiler.
A collection of JavaScript tools written in Rust.
Related contents:
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
Validate and Run GitHub Actions locally.
WRKFLW is a powerful command-line tool for validating and executing GitHub Actions workflows locally, without requiring a full GitHub environment. It helps developers test their workflows directly on their machines before pushing changes to GitHub.
Related contents:
One toolchain for your web project. Format, lint, and more in a fraction of a second.
Biome is a performant toolchain for web projects, it aims to provide developer tools to maintain the health of said projects.
Biome is a fast formatter for JavaScript, TypeScript, JSX, and JSON that scores 96% compatibility with Prettier.
Biome is a performant linter for JavaScript, TypeScript, and JSX that features more than 170 rules from ESLint, TypeSCript ESLint, and other sources. It outputs detailed and contextualized diagnostics that help you to improve your code and become a better programmer!
Related contents:
Dockerfile linter, validate inline bash, written in Haskell.
A smarter Dockerfile linter that helps you build best practice Docker images. The linter parses the Dockerfile into an AST and performs rules on top of the AST. It stands on the shoulders of ShellCheck to lint the Bash code inside RUN instructions.
FTA (Fast TypeScript Analyzer) is a super-fast TypeScript static analysis tool written in Rust. It captures static information about TypeScript code and generates easy-to-understand analytics that tell you about complexity and maintainability issues that you may want to address.
An extremely fast Python type checker and language server, written in Rust.
Related contents:
Kubernetes Live Cluster Linter. A Kubernetes cluster resource sanitizer.
Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestrate a cluster. Popeye scans your cluster based on what’s deployed and not what’s sitting on disk. By linting your cluster, it detects misconfigurations, stale resources and assists you to ensure that best practices are in place, thus preventing future headaches. It aims at reducing the cognitive overload one faces when operating a Kubernetes cluster in the wild. Furthermore, if your cluster employs a metric-server, it reports potential resources over/under allocations and attempts to warn you should your cluster run out of capacity.
The tooling that enables ESLint and Prettier to support TypeScript.
Related contents:
mbake is a Makefile formatter and linter. It only took 50 years!
Golangci-lint is a fast linters runner for Go
It runs linters in parallel, uses caching, supports YAML configuration, integrates with all major IDEs, and includes over a hundred linters.
Related contents:
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language. reviewdog provides a way to post review comments to code hosting service, such as GitHub, automatically by integrating with any linter tools with ease. It uses an output of lint tools and posts them as a comment if findings are in diff of patches to review.
Super-fast Runtime validator (type checker) with only one line.
typia is a transformer library of TypeScript, supporting below features:
- Super-fast Runtime Validators
- Safe JSON parse and fast stringify functions
- JSON schema generator
- Random data generator
Make your Dockerfile proud of itself.
Dockadvisor is a free online Dockerfile analyzer that helps you write better, more efficient Docker configurations. Paste your Dockerfile to get instant feedback on best practices, issues, and optimization opportunities.
Automatically apply Tighten's default code style for Laravel apps.
Automatic configuration for Laravel apps to apply Tighten's standard linting & code standards.
Next-gen Python tooling. Fast, unified, futuristic
Astral’s mission is to make the Python ecosystem more productive by building high-performance developer tools, starting with Ruff.
The Oxidized PHP Toolchain. A blazing fast linter, formatter, and static analyzer for PHP, written in Rust.
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Related contents:
A production-grade, zero-configuration preset for
Ultracite is a zero-config preset for ESLint, Biome, and Oxlint that helps teams and AI write consistent, type-safe code.
Code Analysis Made Easy.
coala provides a unified command-line interface for linting and fixing all your code, regardless of the programming languages you use.
check for a database transaction that silently leaked operations outside its boundary in go.
Related contents:
scissors Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Tired of pushing to test your .gitlab-ci.yml?
Run gitlab pipelines locally as shell executor or docker executor. Get rid of all those dev specific shell scripts and make files.
a dockerfile linter that actually has opinions 🔥. 85 Rules, Instant Results.
a dockerfile linter that actually has opinions. it catches bad practices and tells you about them in the least diplomatic way possible.
think of it as code review from a senior dev who's seen too many prod incidents and has stopped being polite about it.
Related contents:
Catch unnecessary React useEffect hooks to make your code simpler, faster, and safer.
ESLint plugin to catch unnecessary React useEffects to make your code easier to follow, faster to run, and less error-prone. Highly recommended for new React developers as you learn its mental model, and even experienced developers may be surprised.
Catch cloud waste before it ships. Shift-left cloud hygiene engine for AWS and Azure. Catch waste in CI - read-only, deterministic, zero telemetry.
Like tfsec for Terraform or trivy for containers — CleanCloud finds orphaned resources in AWS and Azure and enforces hygiene gates in your CI/CD pipeline before waste reaches production.
Related contents:
TypeScript type checker written in Rust.
This project is in an early stage and it's under active development. Any help would be really appreciated. If you want to help this project successfully launch, please consider contributing developer time or supporting us financially.
Discover vulnerabilities across a codebase with CodeQL, our industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same.
Find and fix problems in your JavaScript code. Pluggable JavaScript Linter.
ESLint is a tool for identifying and reporting on patterns found in ECMAScript/JavaScript code. In many ways, it is similar to JSLint and JSHint with a few exceptions:
Related contents:
🧙♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.
Experience the full power of TypeScript inference to boost productivity for your full-stack application.
tRPC allows you to easily build & consume fully typesafe APIs without schemas or code generation.
Related contents:
The JavaScript Oxidation Compiler. A collection of JavaScript tools written in Rust.
The Oxidation Compiler is creating a collection of high-performance tools for JavaScript and TypeScript. Oxc is building a parser, linter, formatter, transpiler, minifier, resolver ... all written in Rust.
Semgrep Pro Rules to ensure code using LLMs is following best practices.
Semgrep rules that catch common trust & safety mistakes in LLM-powered applications. Scan any codebase in seconds to find hardcoded API keys, missing safety checks, prompt injection risks, and unhandled errors across all major AI providers.
An extensible multilanguage static code analyzer.
PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query.
Analysis Tools and Linters to Improve Code Quality and Avoid Bugs
We list the best static analysis tools and linters that can help you improve code quality. All tools are peer-reviewed by fellow engineers. Avoid bugs in production, outages, and angry customers.
Guard rail for your commit messages for sustainable development.
pglinter is a PostgreSQL extension that analyzes your database for potential issues, performance problems, and best practice violations. Written in Rust using pgrx, it provides deep integration with PostgreSQL for efficient database analysis.