Packagist56Moderatehealth index
PHP★ 96↓ 283K/moSep 9, 2026
Packagist56Moderatehealth index
PHP★ 3↓ 1,393/moSep 18, 2026
npm56Moderatehealth index

sudoeren/arhuslocal-first security analysis for TypeScript & JavaScript
TypeScript★ 9↓ 235/moSep 10, 2026
npm56Moderatehealth index
TypeScript★ 12↓ 308/moSep 13, 2026
Go · Shell★ 11Sep 16, 2026

ckaznocha/intrangeintrange is a program for checking for loops that could use the Go 1.22 integer range feature.
Go★ 38Sep 16, 2026
PyPI · npm · crates.io54Moderatehealth index
JavaScript · Rust★ 2↓ 8,091/moOct 21, 2026

SVGreg/surfaceguardKnow what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.
Go · Python★ 2Sep 14, 2026
npm54Moderatehealth index
TypeScript · JavaScript★ 0↓ 5,326/moSep 26, 2026
PyPI · crates.io54Moderatehealth index
chio-labs/strataA structural linter that enforces layers, module roles, and function shape in Python.
Python · Rust★ 0↓ 2,109/moJul 15, 2026
npm54Moderatehealth index

gerlanss/SemaLocal-first semantic governance for AI agents: contracts, impact, drift, evidence, and verified execution. Codex is the first native integration.
TypeScript★ 0↓ 6,874/moSep 15, 2026

jimyag/ripples基于 Go AST 和类型信息,分析 Git revisions 间直接及间接受影响的 package。Find directly and transitively affected Go packages between Git revisions.
Go★ 1Sep 19, 2026
Packagist54Moderatehealth index
PHP★ 5↓ 99.4K/moSep 15, 2026
npm54Moderatehealth index

pimatis/svelte-doctorDiagnose and fix performance, correctness, and architecture issues in your Svelte codebase
TypeScript★ 41↓ 4,560/moSep 10, 2026
Java★ 372Oct 20, 2026
PHP★ 586↓ 129.5K/moOct 3, 2026
PyPI · npm54Moderatehealth index
wang-jie-git/moatAI Coding Gatekeeper — Zero-config, real-time guardrails for AI-generated code. 零配置AI编码守门员,实时拦截架构/安全/回归问题。
Python · HTML★ 1↓ 2,206/moJul 19, 2026

Eljakani/wardSecurity scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.
Go★ 336Sep 19, 2026
Packagist53Moderatehealth index
Mixed★ 13↓ 2,508/moSep 18, 2026
Packagist53Moderatehealth index

getmilpa/resolverMilpa Resolver — resolve the architecture before booting it: contracts, capabilities, surfaces and host profiles into a learnable ResolutionReport. Apache-2.0.
PHP★ 0↓ 9,140/moSep 18, 2026
Packagist53Moderatehealth index

jbboehr/yumemi.phpStatic dimensional analysis for PHPStan on native PHP numbers, backed by exact rational unit conversion
PHP★ 0↓ 34/moSep 18, 2026

jetlint/jetlintA fast, type-aware TypeScript 7 linter — drop-in compatible with typescript-eslint
Go★ 2Sep 19, 2026

malikov73/flakylintStatic analysis for flaky Go tests — catches flaky-test patterns before they flake in CI
Go★ 1Sep 12, 2026
Packagist53Moderatehealth index
PHP★ 1↓ 8,865/moSep 10, 2026
Packagist53Moderatehealth index
PHP★ 23↓ 341.4K/moSep 13, 2026

timakin/bodycloseAnalyzer: checks whether HTTP response body is closed and a re-use of TCP connection is not blocked.
Go★ 323Oct 21, 2026
crates.io · npm53Moderatehealth index
Rust · MDX★ 2Jul 24, 2026
Packagist · npm51Moderatehealth index
PHP★ 7↓ 3,886/moSep 16, 2026
npm51Moderatehealth index

CodeDeficient/KarpeSlop⚡ The AI Slop Index linter inspired by @karpathy. Detects hallucinated imports, any-type abuse, vibe coding, and soul-less patterns in TypeScript/JavaScript/React. Fast (~4s), educational, CI-ready. npx karpeslop@latest
TypeScript★ 39↓ 934/moOct 20, 2026
Packagist51Moderatehealth index
PHP · Shell★ 134↓ 7,830/moSep 16, 2026