A CLI that scores the code quality of a project across 14 languages and produces a report with an overall score and per-file rankings.
qltysh/qlty
A Rust-based multi-language CLI that runs linters, auto-formatters, security scanners and maintainability checks through one tool and config file.
Open-source alternative to:SonarQube
- Stars
- 3,202
- Forks
- 274
- Open issues
- 87
- Last commit
- 9 hours ago
What is it?
Qlty CLI is a code quality command-line tool that wraps a large set of existing static analysis tools behind a single interface. It covers linting, auto-formatting, code smell and duplication detection, complexity and other metrics, secret and vulnerability scanning, and test coverage including diff coverage on changed lines. Setup is driven by a `.qlty/qlty.toml` file in the repository, which can be generated with `qlty init` based on the languages present.
The tool runs linters natively rather than inside Docker, and it is designed to focus on issues introduced by recent changes through Git awareness. It can be wired into pre-commit and pre-push hooks and used with pull request feedback. Installers are provided for macOS, Linux and Windows on x86 and ARM, and a Docker image is also published.
The project is licensed under the Business Source License 1.1 with a delayed open source publication, and the CLI is free to use, including commercially, with no contributor limits.
Key features
- 01Runs 70+ static analysis tools across 40+ languages through one CLI.
- 02Auto-formats code and applies tool-generated fixes.
- 03Detects code smells such as duplication and complexity.
- 04Scans for security issues and secrets.
- 05Reports total and diff test coverage.
- 06Runs linters natively and integrates with Git hooks and pull request feedback.
Use cases
- Standardizing lint and formatting across a polyglot repository.
- Checking only the code changed in a commit or pull request before merging.
- Adding quality and security gates to pre-commit or CI workflows.
- Tracking duplication, complexity and coverage trends in a codebase.
Quick start
- 1
Run the official install script for your OS from the README (macOS, Linux or Windows)
- 2
Set up Qlty in your Git repository
qlty init - 3
View a sample of lint issues
qlty check --sample=5
Things to know
- The README describes Fair Source licensing with delayed open source publication, so it is not standard open source.
- The license is not clearly identified in the project metadata.
Topics
FAQ
- What is qlty?
- A Rust-based multi-language CLI that runs linters, auto-formatters, security scanners and maintainability checks through one tool and config file. Qlty CLI is a code quality command-line tool that wraps a large set of existing static analysis tools behind a single interface. It covers linting, auto-formatting, code smell and duplication detection, complexity and other metrics, secret and vulnerability scanning, and test coverage including diff coverage on changed lines. Setup is driven by a `.qlty/qlty.toml` file in the repository, which can be generated with `qlty init` based on the languages present.
- Is qlty free to use? What license does it have?
- qlty is open source under the Other license. Check the license terms before using it in commercial products.
- Is qlty still maintained?
- Actively maintained. The last commit to qlty was on Oct 22, 2026.
- What can I use qlty for?
- Standardizing lint and formatting across a polyglot repository. Checking only the code changed in a commit or pull request before merging. Adding quality and security gates to pre-commit or CI workflows. Tracking duplication, complexity and coverage trends in a codebase.
- How do I install qlty?
- Run the official install script for your OS from the README (macOS, Linux or Windows) Set up Qlty in your Git repository: qlty init View a sample of lint issues: qlty check --sample=5
- Where can I get qlty?
- The source code and installation instructions are on GitHub: https://github.com/qltysh/qlty
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Fast, open-source static analysis CLI that finds bugs and enforces coding standards using code-like patterns instead of regex or ASTs.
A Rust-based toolchain for web projects that provides a formatter and linter for JavaScript, TypeScript, JSX, JSON, CSS and more, via CLI and LSP.
Self-hosted code quality and security platform that scans projects for bugs, vulnerabilities and maintainability issues, with Quality Gates for CI pipelines.
A fast Go-based Dockerfile linter with 60+ best-practice rules, quality scoring, and security checks for secrets and ARG usage.
A Python utility and library that automatically sorts and groups your import statements.