Skip to content

Add skylos tool for dead code detection and security#2942

Closed
duriantaco wants to merge 1 commit intovinta:masterfrom
duriantaco:duriantaco-patch-1
Closed

Add skylos tool for dead code detection and security#2942
duriantaco wants to merge 1 commit intovinta:masterfrom
duriantaco:duriantaco-patch-1

Conversation

@duriantaco
Copy link
Copy Markdown

Project

Skylos

Checklist

  • One project per PR
  • PR title format: Add project-name
  • Entry format: * [project-name](url) - Description ending with period.
  • Description is concise and short

Why This Project Is Awesome

Which criterion does it meet? (pick one)

  • Industry Standard - The go-to tool for a specific use case
  • Rising Star - 5000+ stars in < 2 years, significant adoption
  • Hidden Gem - Exceptional quality, solves niche problems elegantly

Explain:
Skylos is a framework-aware alternative to Vulture (already listed). We benchmarked both tools on 9 of the most popular Python repositories on GitHub (350k+ combined stars) with every finding

How It Differs

The key difference is framework awareness. Vulture flags Django views, FastAPI endpoints, Pydantic model fields, and pytest fixtures as dead code because it doesn't understand framework magic. Skylos recognizes these patterns and skips them, which is why it has 3x fewer false positives.

Beyond dead code, Skylos also does taint-based security analysis, something Vulture does not do.

  • 323+ GitHub stars, actively maintained, commits within last week
  • 10 months old with consistent activity
  • Full benchmark methodology and reproducible results: https://github.com/duriantaco/skylos-demo
  • CI/CD GitHub Action, VS Code extension, MCP server for AI agents

Copy link
Copy Markdown

@omarmodhet-lab omarmodhet-lab left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

jjj

Repository owner deleted a comment from omarmodhet-lab Mar 13, 2026
@JinyangWang27
Copy link
Copy Markdown
Collaborator

@duriantaco Thanks for the submission. Skylos covers interesting ground, but it's quite broad in scope — dead code, SAST, LLM agents, TypeScript/Go support, and a cloud dashboard — making it hard to place cleanly in the list. The core Python dead code detection overlaps significantly with vulture already listed, and the commercial/SaaS aspects of the pro tier give us pause. Closing for now, but feel free to discuss if you think there's a more specific fit.

@duriantaco
Copy link
Copy Markdown
Author

hey @JinyangWang27 , thanks for the thoughtful review! That’s a completely fair feedback and I agree Skylos might be broader in scope than a typical awesome-python entry. Yeap there'll be some overlaps with Vulture or any other dead code detector. Although like 95% of the project is written in Python, we’re intentionally building it toward a wider multi-language direction over time although our main focus is still currently Python.

Really appreciate you taking the time to review it. Cheers and have a great week ahead.

@codybarrett108-pixel
Copy link
Copy Markdown

codybarrett108-pixel commented Mar 17, 2026 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants