Add skylos tool for dead code detection and security#2942
Add skylos tool for dead code detection and security#2942duriantaco wants to merge 1 commit intovinta:masterfrom
Conversation
|
@duriantaco Thanks for the submission. Skylos covers interesting ground, but it's quite broad in scope — dead code, SAST, LLM agents, TypeScript/Go support, and a cloud dashboard — making it hard to place cleanly in the list. The core Python dead code detection overlaps significantly with vulture already listed, and the commercial/SaaS aspects of the pro tier give us pause. Closing for now, but feel free to discuss if you think there's a more specific fit. |
|
hey @JinyangWang27 , thanks for the thoughtful review! That’s a completely fair feedback and I agree Skylos might be broader in scope than a typical awesome-python entry. Yeap there'll be some overlaps with Vulture or any other dead code detector. Although like 95% of the project is written in Python, we’re intentionally building it toward a wider multi-language direction over time although our main focus is still currently Python. Really appreciate you taking the time to review it. Cheers and have a great week ahead. |
|
Thanks for sharing this
…On Mon, Mar 16, 2026, 10:58 PM oha ***@***.***> wrote:
*duriantaco* left a comment (vinta/awesome-python#2942)
<#2942 (comment)>
hey @JinyangWang27 <https://github.com/JinyangWang27> , thanks for the
thoughtful review! That’s a completely fair feedback and I agree Skylos
might be broader in scope than a typical awesome-python entry. Yeap
there'll be some overlaps with Vulture or any other dead code detector.
Although like 95% of the project is written in Python, we’re intentionally
building it toward a wider multi-language direction over time although our
main focus is still currently Python.
Really appreciate you taking the time to review it. Cheers and have a
great week ahead.
—
Reply to this email directly, view it on GitHub
<#2942 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/B7HX4LR2UAONONPOEYA6LK34RDEPLAVCNFSM6AAAAACWHKHGISVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DANZSGE3TCNJVGE>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Project
Skylos
Checklist
Add project-name* [project-name](url) - Description ending with period.Why This Project Is Awesome
Which criterion does it meet? (pick one)
Explain:
Skylos is a framework-aware alternative to Vulture (already listed). We benchmarked both tools on 9 of the most popular Python repositories on GitHub (350k+ combined stars) with every finding
How It Differs
The key difference is framework awareness. Vulture flags Django views, FastAPI endpoints, Pydantic model fields, and pytest fixtures as dead code because it doesn't understand framework magic. Skylos recognizes these patterns and skips them, which is why it has 3x fewer false positives.
Beyond dead code, Skylos also does taint-based security analysis, something Vulture does not do.