1230 Open source projects that are alternatives of or similar to Dg

Code metric analyzer for Swift projects.

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

CSS complexity linter

TIRO - A hybrid iterative deobfuscation framework for Android applications

A library to read static analysis reports into a Java object model

Code Climate Engine for ESLint

scalastyle

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

SonarQube Cucumber Gherkin Analyzer

Code Climate engine for code duplication analysis

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

SonarQube Java Properties Analyzer

Reverse engineering and software quality assurance tool for .NET assemblies

Extra strict and opinionated rules for PHPStan

🐘 SonarPHP: PHP static analyzer for SonarQube & SonarLint

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Bringing clang-tidy magic to Visual Studio C++ developers.

Program for determining types of files for Windows, Linux and MacOS.

ClangKit provides an Objective-C frontend to LibClang. Source tokenization, diagnostics and fix-its are actually implemented.

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

🐳 📡 Docker way of running SonarQube + any DB

Dominator Tree LLVM Pass to Test Satisfiability

DEPRECATED. USE INSTEAD github.com/blockspacer/flextool

🕵️ Haskell STatic ANalyser

Droidefense: Advance Android Malware Analysis Framework

cwe_checker finds vulnerable patterns in binary executables

PHP Magic Number Detector

🐞 Primitive Erlang Security Tool

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.

Performant type-checking for python.

Binary Analysis Platform

The official GitHub mirror of https://gitlab.com/pycqa/flake8

A linter, formatter for finding and removing unused import statements.

S2E: A platform for multi-path program analysis with selective symbolic execution.

A selection of useful scripts for use in CMake projects, include code coverage, sanitizers, and dependency graph generation.

An open format definition for static analysis tools

STatic (LLVM) Object file Analysis Tool

A parser and source code analyzer for PL/SQL and Oracle SQL.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

Manage translation and localization with static analysis, for Ruby i18n

The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.

Kubernetes object analysis with recommendations for improved reliability and security

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

⚗️ Adds code analysis to Laravel improving developer productivity and code quality.

A regex based source code scanner.

A static analyzer for Java, C, C++, and Objective-C

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

Standalone linter for ABAP

Semgrep rules registry

☕️ PMD Plugin for SonarQube

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

The CodeQL extractor and libraries for Go.

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

The leading static analyzer for Perl. Configurable, extensible, powerful.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

PHPStan extension for webmozart/assert

A GitHub app to automatically review Python code style over Pull Requests

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code