InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →
Top 22 Rust Static Analysis Projects
-
There was a hang/performance bug [1, 2] that was reported just after the beta release, which we've since fixed [3]. You might try seeing if we get through your entire project now?
(And as an aside, there _is_ a verbose mode: if you add `-vv` you'll get DEBUG-level log messages printing out the name of each file as we start to check it, and you can set TY_MAX_PARALLELISM=1 in your env to make it very clear which file is causing the hang. That's how we debug these kinds of issues when they're reported to us.)
[1] https://github.com/astral-sh/ty/issues/1968
[2] https://github.com/astral-sh/ty/issues/1993
[3] https://github.com/astral-sh/ruff/pull/22030
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
-
- Project mention: Show HN: Zizmor, static analysis for GitHub Actions | news.ycombinator.com | 2025-06-26
- Project mention: Flowistry: An IDE plugin for Rust that focuses on relevant code | news.ycombinator.com | 2025-10-18
Explained in README: https://github.com/willcrichton/flowistry#why-isnt-flowistry...
-
qlty
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Project mention: Show HN: Pyscn – Python code quality analyzer for vibe coders | news.ycombinator.com | 2025-10-05This looks great! Duplication and dead code are especially tricky to catch because they are not visible in diffs.
Since you mentioned the implementation details, a couple questions come to mind:
1. Are there any research papers you found helpful or influential when building this? For example, I need to read up on using tree edit distance for code duplication.
2. How hard do you think this would be to generalize to support other programming languages?
I see you are using tree-sitter which supports many languages, but I imagine a challenge might be CFGs and dependencies.
I’ll add a Qlty plugin for this (https://github.com/qltysh/qlty) so it can be run with other code quality tools and reported back to GitHub as pass/fail commit statuses and comments. That way, the AI coding agents can take action based on the issues that pyscn finds directly in a cloud dev env.
-
Stream
Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.
-
-
mago
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
-
-
-
-
phanalist
Performant static analyzer for PHP, which is extremely easy to use. It helps you catch common mistakes in your PHP code.
-
-
l3x
AI-driven Static Analyzer. Supports Rust and Smart contracts: Solana based on Rust, Ethereum based on Solidity.
-
cpplumber
Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects
-
-
treeedb
Generate Soufflé Datalog types, relations, and facts that represent ASTs from a variety of programming languages.
-
-
Yesterday I built depx, a CLI tool in Rust that analyzes JavaScript/TypeScript projects to understand what's really in your node_modules:
-
-
debtmap
Technical debt and risk analyzer that predicts bug hotspots by combining cognitive complexity, pattern recognition, coverage gaps, information theory, and git history.
Project mention: Ask HN: What Are You Working On? (October 2025) | news.ycombinator.com | 2025-10-12I'm working on Debtmap - An open source Rust-based code complexity analyzer that tells you exactly which code to refactor and which code to test for maximum impact. Combines complexity metrics with test coverage data to identify the riskiest code in your codebase. Uses entropy analysis to reduce false positives by distinguishing genuinely complex code from repetitive patterns.
https://github.com/iepathos/debtmap
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).
Rust Static Analysis discussion
Rust Static Analysis related posts
-
Fast TypeScript (Code Complexity) Analyzer
-
Developer Tooling #007
-
Show HN: Pyscn – Python code quality analyzer for vibe coders
-
Software Needs an Independent Auditor
-
Claude Code now supports Hooks
-
Show HN: Zizmor, static analysis for GitHub Actions
-
Zizmor: Static analysis tool for GitHub Actions
- A note from our sponsor - InfluxDB www.influxdata.com | 23 Dec 2025
Index
What are some of the best open-source Static Analysis projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | ruff | 44,521 |
| 2 | static-analysis | 14,261 |
| 3 | ast-grep | 11,708 |
| 4 | binsider | 3,738 |
| 5 | zizmor | 3,479 |
| 6 | flowistry | 2,965 |
| 7 | qlty | 2,885 |
| 8 | pylyzer | 2,873 |
| 9 | mago | 2,107 |
| 10 | crepe | 487 |
| 11 | debugoff | 329 |
| 12 | fta | 280 |
| 13 | phanalist | 145 |
| 14 | datadog-static-analyzer | 114 |
| 15 | l3x | 86 |
| 16 | cpplumber | 86 |
| 17 | enderpy | 83 |
| 18 | treeedb | 79 |
| 19 | progge.rs | 38 |
| 20 | depx | 14 |
| 21 | arch_test | 13 |
| 22 | debtmap | 9 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com