Roslynator vs Sourcery

Roslynator is a set of code analysis tools for C# development environments built on Roslyn. Its IDE extensions offer refactorings and fixes for compiler diagnostics, while analyzers are distributed separately through NuGet packages. Listed editor extensions cover Visual Studio 2026 and 2022, VS Code, and Open VSX. The VS Code extension requires legacy OmniSharp with `dotnet.server.useOmnisharp` set to true and does not work with C# Dev Kit. A command-line tool can be installed with `dotnet tool install -g roslynator.dotnet.cli`; the CLI is also integrated into MegaLinter for CI. EditorConfig settings can configure analyzers, refactorings, and compiler diagnostic fixes, and a testing framework supports unit tests for those tools. The .NET client libraries extend the Roslyn API but do not include analyzers or refactorings. The repository is licensed under Apache License 2.0. Its security policy supports version 5.x, CLI 0.x, and the Visual Studio 2026 and VS Code extensions; versions below 5.0 and Visual Studio 2022 extensions are out of support.

Sourcery reviews pull requests with AI, returning a summary, review comments and suggested fixes within minutes. Users can apply a suggestion as a change and commit it to the pull request. Security checks cover committed secrets, static-analysis vulnerabilities, infrastructure-as-code misconfigurations, dependencies and licenses. The extension works in VS Code, Cursor, Windsurf and JetBrains editors, and Sourcery supports GitHub, GitLab, GitHub Enterprise Server and self-hosted GitLab. Open Source checks security on every pull request; Open Source and Pro also scan twice a week, while Team includes nightly scans. The public REST API, for listing, reading, counting and bulk-updating security findings and groups, is a Team feature. Open Source is free; Pro is $12 a month billed annually, or $15 per developer per month billed monthly. Team is $24 a month billed annually, or $30 per developer per month billed monthly. A 14-day Team-feature trial is available organization-wide after installation, without a credit card. Sourcery says it does not retain customer code after reviews or use it to train models.