Top 403 static-analysis open source projects

🔐 A code style linter for Elixir

FlowDroid Static Data Flow Tracker

Code analyzer for C# and VB.NET projects https://redirect.sonarsource.com/plugins/vbnet.html

SonarJS rules for ESLint

A community-driven list of awesome linters.

Security scanner coordinator

🆎 Tool to compare two revisions of a class API to check for BC breaks

Golang security checker

PHP Magic Number Detector

A static analysis tool for finding errors in PHP applications

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.

A hackable malware sandbox for the 21st Century

Go fearless SQL. Sqlvet performs static analysis on raw SQL queries in your Go code base.

Binee: binary emulation environment

Define and run pattern-based custom linting rules.

Performing security tests inside your CI

T.J. Watson Libraries for Analysis

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Droidefense: Advance Android Malware Analysis Framework

Staticcheck - The advanced Go linter

Your performance & security consultant, an artisan command away.

📄 Documented Style Sheets Parser

A vulnerability scanner for container images and filesystems

WEB SERVICE SECURITY ASSESSMENT TOOL

Symfony extension for PHPStan

Mirror kept for legacy. Moved to https://github.com/llvm/llvm-project

Code smell detector for Ruby

The Exakat Engine : smart static analysis for PHP

CodeCompass is a software comprehension tool for large scale software written in C/C++ and Java

static analysis of C/C++ code

Doctrine extensions for PHPStan

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Official ESLint plugin for Vue.js

ClangKit provides an Objective-C frontend to LibClang. Source tokenization, diagnostics and fix-its are actually implemented.

🚀Optimizer for mobile applications

An extensible multilanguage static code analyzer.

Awesome .NET Security Resources

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

It's not just a linter that annoys you!

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

A static type analyzer for Python code

Joint Advanced Defect assEsment for android applications

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Visualize call graph of a Go program using Graphviz

Extra strict and opinionated rules for PHPStan

Pssst!... see what Rust is doing behind the curtains 🕵🤫

🐘 SonarPHP: PHP static analyzer for SonarQube & SonarLint

Bringing clang-tidy magic to Visual Studio C++ developers.

🐺 Malware analysis platform

The implementation of the Rascal meta-programming language (including interpreter, type checker, parser generator, compiler and JVM based run-time system)

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

Clean C++ project for you to use. Features: Modern CMake, CPack, Doxygen, PlantUML, Catch Unit testing, static analysis

Static Analysis Compiler Plugin for Scala

Static analyser for finding Deadlocks in Go

Chronos - A static race detector for the go language

Pluggable TypeScript and JavaScript linter

Links to tools by subject

SeaHorn Verification Framework

A Golang tool that does static analysis, unit testing, code review and generate code quality report.