Running in production · Independent · 26 Oct 2026

oxsecurity/megalinter

πŸ¦™ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

← Running in production
MegaLinter: multi-language code checker. Analyzes code style, errors, and security issues across many languages.
Verified26 Oct 2026

Radar check

What we found when we opened it. Every bar is one fact, with its date.

Alive100

Last code pushed 26 Oct 2026, the same day before this check.

Releases85

Latest release v10.1.0 on 5 Sep 2026.

Maturity90

Public since October 2020, about 6 years.

Adoption68

2,623 stars and 317 forks.

Activity100

570 commits and 45 new issues in the last 90 days.

Community100

162 contributors. 562 pull requests merged in 90 days.

Security80

A security policy says how to report a problem. No published security advisories.

Licence AGPL-3.0: free to run; offering a changed copy to others as a service means publishing your changesSetup effort 2 of 5Payoff 4 of 5
How the bars are scored
  • Alive. Days since the last code push: a week or less 100, a month 90, three months 70, six months 50, a year 30, eighteen months 15, older 0.
  • Releases. Age of the latest GitHub release, on a similar scale; no bar when the project publishes no releases.
  • Maturity. Age of the project: eight years 100, five 90, three 70, two 55, one 40, six months 25, younger 10.
  • Adoption. Stars on a log scale: 100,000 stars is 100, 10,000 is 80, 1,000 is 60, 100 is 40.
  • Activity. Commits in the last 90 days: 300 or more 100, 100 85, 30 65, 10 45, any 25.
  • Community. People who have contributed: 100 or more 100, 30 80, 10 60, 5 40, 2 25, one 10.
  • Security. A published security policy 80, none 40; published advisories are listed, not scored.

Checked by Repo Radar on 26 Oct 2026 from the repository on GitHub.

In simple English

This tool checks your code for errors, spelling mistakes and bad formatting before you merge it. It works with dozens of programming languages and configuration file types. You can run it inside GitHub Actions or on your own computer. It helps keep your codebase clean without manual checking. It is free to use for any project.

What it is

A comprehensive code analysis runner that bundles over a hundred individual linters and formatters into a single Docker image. It generates detailed reports and can automatically fix formatting issues directly on your Git branch.

What it is good for

Solo developers and teams who want automated code quality checks across multiple languages without spending hours configuring separate tools for each one.

Stars2.6k
LicenceAGPL-3.0
Latestv10.1.0 (2026-09-05)checked 26 Oct 2026
Last code change2026-10-26
Written inDockerfile
Setup effort
2 / 5
Payoff
4 / 5
Good
  • Supports over sixty languages and file formats out of the box.
  • Can automatically apply safe code fixes directly to your pull request.
  • Compatible with many continuous integration systems and local command-line use.
Watch for
  • The full Docker image is very large and takes time to download and run.
  • High memory usage when running dozens of different linters concurrently.
  • Complex configuration files are needed to tune rules for large multi-language repositories.
Replaces

Running dozens of individual linters manually or setting up separate CI workflows for each language.

Works well with

GitHub Actions or Docker.

Similar repositories
  • super-linter/super-linter11k stars

    The original multi-language linter by GitHub, while MegaLinter is an expanded fork with more features and a Python core.

Also reviewed on Repo Radar
  • traefik/traefik65k stars

    Decides which program answers each incoming request, and builds the rules by watching where the programs are.

  • rajnandan1/kener5.2k stars

    A status page you run yourself, which checks your services and shows their recent history.

  • caprover/caprover15k stars

    A web page that installs apps and databases onto one rented computer, and sorts out the addresses and certificates.

Install
npx mega-linter-runner --install

Independent: reviewed for Repo Radar outside the daily editions. Every independent repository

On Stack Radar: Build & Ship β€Ί Testing & Quality β€Ί Static Analysis & Type.

Get the next edition in your inbox

A dozen repositories, opened and checked. The licence read, the last release dated, and the ones that did not make it named with the reason. It is the half most lists leave out.

No tracking pixels. One click to leave. The archive stays free either way.

We use your address to send the edition and nothing else. Confirm by email, leave in one click. How we handle it.