1230 Open source projects that are alternatives of or similar to Dg

☕️ SonarSource Static Analyzer for Java Code Quality and Security

Lint all your JavaScript, CSS, HTML, Markdown and Dockerfiles with a single command

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

SonarLint integration for Apache Netbeans

PHP Static Analysis Tool - discover bugs in your code without running it!

SeaHorn Verification Framework

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

Static program analysis for TIP

Next-gen phpDoc parser with support for intersection types and generics

unimport is a Go static analysis tool to find unnecessary import aliases.

SonarSource Static Analyzer for JavaScript and TypeScript

EBA is a static bug finder for C.

cfmt is a tool to wrap Go comments over a certain length to a new line.

Static Analyzer for LLVM bitcode based on Abstract Interpretation

Type Analyzer for JavaScript

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

T.J. Watson Libraries for Analysis

nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.

Program analysis playground for a simple, imperative language

Nette Framework class reflection extension for PHPStan & framework-specific rules

Static Analyzer for LLVM bitcode based on Abstract Interpretation

identypo is a Go static analysis tool to find typos in identifiers (functions, function calls, variables, constants, type declarations, packages, labels).

Doctrine extensions for PHPStan

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.

A LLVM-based static analysis framework.

Chronos - A static race detector for the go language

Static analysis framework for .NET programs.

Code analyzer for C# and VB.NET projects https://redirect.sonarsource.com/plugins/vbnet.html

Vulnerability Patterns Detector for C# and VB.NET

scalastyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Performant type-checking for python.

SonarQube Java Properties Analyzer

🐳 📡 Docker way of running SonarQube + any DB

Reverse engineering and software quality assurance tool for .NET assemblies

Dominator Tree LLVM Pass to Test Satisfiability

DEPRECATED. USE INSTEAD github.com/blockspacer/flextool

An open format definition for static analysis tools

STatic (LLVM) Object file Analysis Tool

The official GitHub mirror of https://gitlab.com/pycqa/flake8

🐞 Primitive Erlang Security Tool

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.

The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.

A linter, formatter for finding and removing unused import statements.

Policeman's Forbidden API Checker

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

Binary Analysis Platform

Kubernetes object analysis with recommendations for improved reliability and security

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

S2E: A platform for multi-path program analysis with selective symbolic execution.

Code metric analyzer for Swift projects.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

A parser and source code analyzer for PL/SQL and Oracle SQL.

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

☕️ PMD Plugin for SonarQube

A regex based source code scanner.

Manage translation and localization with static analysis, for Ruby i18n

Semgrep rules registry