GitHub Trends
11.4K subscribers
15.9K links
See what the GitHub community is most excited about today.

A bot automatically fetches new repositories from https://github.com/trending and sends them to the channel.

Author and maintainer: https://github.com/katursis
Download Telegram
#go #code_quality #code_security #sast #static_analysis #tree_sitter

Globstar is a free, open-source tool that helps developers check their code for problems like security issues or bad coding practices. It uses a simple way to write these checks using tree-sitter queries, which are easy to learn and use. You can run Globstar in your automated testing pipelines without needing extra software installed. This makes it fast and easy to ensure your code follows your team's rules and standards. Plus, since it's open-source under the MIT license, you can use it freely in any project without worrying about legal restrictions.

https://github.com/DeepSourceCorp/globstar
#rust #code_quality #ide #language #language_server #lsp #python #rust #type_check #type_checker #typecheck #typechecker #types #typing

Pyrefly is a fast tool for checking Python code. It helps catch mistakes before you run your code, making it easier to write reliable programs. Pyrefly can work with both new and old Python projects, even if they don't have type information. It integrates well with editors like VSCode, providing features like auto-completion and code refactoring. This makes coding faster and more efficient, helping you avoid bugs and making your code easier to understand and maintain.

https://github.com/facebook/pyrefly
#python #ai #bug_detection #code_audit #code_quality #code_review #developer_tools #devsecops #google_gemini #llm #react #sast #security_scanner #supabase #typescript #vite #vulnerability_scanner #xai

**DeepAudit** is an AI-powered code audit tool using multi-agent collaboration to deeply scan projects for vulnerabilities like SQL injection, XSS, and path traversal. Import code from GitHub/GitLab or paste snippets; agents plan, analyze with RAG knowledge, and verify issues via secure Docker sandbox PoCs, generating PDF reports with fix suggestions. Deploy easily with one Docker command, supports local Ollama models for privacy, and cuts traditional tools' high false positives. **You benefit** by automating secure audits like a pro hacker—saving time, reducing errors, ensuring real exploits are caught, and speeding safe releases without manual hassle.

https://github.com/lintsinghua/DeepAudit
#java #code_quality #command_line_tool #hacktoberfest #java #static_analysis #static_code_analysis

Checkstyle is a Java tool that finds code style and best-practice problems, so you can catch mistakes early and keep code clean. It is easy to add to your build, has docs and examples, and helps you spot issues like a switch-case fall-through before they cause bugs, making your code safer and easier to maintain.

https://github.com/checkstyle/checkstyle
👍2👌1