Open source code-quality projects

Every project in the registry tagged code-quality, ranked by real GitHub adoption.

projects 15 combined stars ★ 139K refresh nightly
01 strix ★ 73K

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

last push3 days ago languagePython licenseApache-2.0
02 keploy ★ 19K

last push5 hours ago languageGo licenseApache-2.0
03 reviewdog ★ 9.7K

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

last push12 hours ago languageGo licenseMIT
04 repowise ★ 8.1K

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

last push9 hours ago languagePython licenseAGPL-3.0
05 DeepAudit ★ 7.3K

DeepAudit:人人拥有的 AI 黑客战队,让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行,自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ,一键生成报告。支持中转站。​让安全不再昂贵,让审计不再复杂。

last push38 hours ago languagePython licenseAGPL-3.0
06 pyrefly ★ 7.2K

A fast type checker and language server for Python

last push5 hours ago languageRust licenseMIT
07 CyberStrike ★ 3.4K

Open-source AI-powered offensive security harness for automated penetration testing.

last push5 hours ago languageTypeScript licenseAGPL-3.0
08 agent-rules-books ★ 3.2K

AGENTS.md rules / skills for AI coding agents: Codex, Cursor & Claude Code. Inspired by Clean Code, Refactoring, DDD, Clean Architecture and DDIA programming bo

last push2 months ago language— licenseMIT
09 zeroshot ★ 2.1K

Runs coding agents as a graph: one agent implements, independent agents review, failures go to repair, and nothing ships until the checks pass. Works with Codex

last push7 hours ago languageRust licenseMIT
10 brooks-lint ★ 1.6K

Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.

last push13 hours ago languageHTML licenseMIT
11 moai-adk ★ 1.3K

Agentic development harness for Claude Code — SPEC-driven plan/run/sync, TRUST 5 quality gates, model+effort routing, and Claude×GLM multi-LLM cost control. Sin

last push5 hours ago languageGo licenseApache-2.0
12 openqodex ★ 1.1K

Open source AI code review for Claude Code and Codex, before you push. Scanners (SAST, secrets, dependencies, lint) on the lines you changed, then a separate re

last push41 hours ago languageTypeScript licenseApache-2.0
13 aislop ★ 720

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks, and more. 50+ dete

last push36 hours ago languageTypeScript licenseMIT
14 ai-review ★ 600

🚀 AI-powered code review tool for GitHub, GitLab, Bitbucket Cloud, Bitbucket Server, Azure DevOps and Gitea — built with LLMs like OpenAI, Claude, Gemini, Olla

last push1 months ago languagePython licenseApache-2.0
15 roam-code ★ 516

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evid

last push3 days ago languagePython licenseApache-2.0

Related tags

← all tags

Frequently asked questions

How many open source code-quality projects are there?

This registry tracks 15 projects tagged code-quality, with 139,106 GitHub stars between them. The most-adopted is strix at 73,376 stars.

Are these code-quality projects free to use?

Yes — 15 of the 15 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which code-quality project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these code-quality projects still maintained?

15 of the 15 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.