Global

Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.

> Anti Slop: Rules for AI Coding Agents. It stops them from generating generic "AI slop" UI and copy, without letting the result turn sterile. It is a filter, not a style guide: no prescribed colors, fonts, or layouts.

A curated, battle-tested AI-coding toolkit: Claude Code plugins, subagent orchestration, quality gates, and ready-to-copy prompts, extracted from real production use.

Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Anti-slop is first and foremost the ruleset I use with my work, projects, and team. It reflects my preferences and taste rather than attempting to be a universal coding standard.

Ruff can be used to replace Flake8 (plus dozens of plugins), Black, isort, pydocstyle, pyupgrade, autoflake, and more, all while executing tens or hundreds of times faster than any individual tool.

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.

Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

AI writing has a smell. delve, seamless, unlock, it's not just a tool, it's a journey. Readers catch it now, and a page that smells of it is a page they stop trusting.

No tool finding as much was more precise in all 7 compiler-graded cells.

Excerpt from fallow audit on the vitest monorepo, auditing its last 15 commits. 0, warm base-snapshot cache. The gate passed: the 163 inherited findings are pre-existing and excluded by design, so they do not block the change.

The Oxidation Compiler is a collection of high-performance tools for JavaScript and TypeScript written in Rust.

/'knɪp/ means "(to) cut" and is pronounced with a hard "K" 🇳🇱

ShellCheck is a GPLv3 tool that gives warnings and suggestions for bash/sh shell scripts:

Our documentation is now live on GitHub Pages at We recommend browsing the documentation on GitHub Pages rather than directly in the repository.

golangci-lint is a free and open-source project built by volunteers.

The Kani Rust Verifier is a bit-precise model checker for Rust.

1. js best practices, as well as content written here by collaborators

Software engineering principles, from Robert C. Martin's book Clean Code, adapted for JavaScript. This is not a style guide.

:sparkles: Monorepo for all the tooling which enables ESLint to support TypeScript

This open-access course is directed at those who are already familiar with C and object-oriented programming aiming for a proficiency level of C++ programming. The course covers the basics of C++ programming and moves on to advanced C++ semantics and concepts.

SonarQube is the algorithmic verification platform for code quality and security.

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

@shadcn/lint is an agent-first linter for Tailwind design systems.

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.