408 Open source projects that are alternatives of or similar to rstatic

PHP Static Analysis Tool - discover bugs in your code without running it!

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A library for detecting swapped arguments in function calls, and a Clang Static Analyzer plugin used to demonstrate the library.

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

Configuration files that allow cppcheck to provide better static analysis results

A PHP parser written in PHP

🐺 Malware analysis platform

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

No description or website provided.

A free and open-source SonarQube plugin for static code analysis of Scala projects.

A Simple PE File Heuristics Scanners

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

sleigh craft!

The CodeQL extractor and libraries for Go.

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

Telling tales on you for leaking secrets!

Android malware detection using static and dynamic analysis

汽车/安卓/固件/代码安全测试工具集

A linter, formatter for finding and removing unused import statements.

PHP Magic Number Detector

✨🚀 Blazing fast, inferred static type checker for JavaScript.

Swiss-army knife for D source code

Very WIP static analysis for Lua

Android Mobile Device Hardening

An ethereum evm bytecode disassembler and static/dynamic analysis tool

C++ compile-time programming (serialization, reflection, code modification, enum to string, better enum, enum to json, extend or parse language, etc.)

Static checker for Java

Securify v2.0

A plugin to simplify Static Code Analysis on Gradle. Not restricted to, but specially useful, in Android projects, by making sure all analysis can access the SDK classes.

Security scanner for your Terraform code

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.

SonarQube Cucumber Gherkin Analyzer

Read-only mirror of the Klever Git repository

A 6502-oriented low-level programming language supporting advanced static analysis

Language server for PHP, with powerful static analysis and type inference.

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Bolt is a language with in-built data-race freedom!

Making CoreOS' Clair easily work in CI/CD pipelines

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

High-level library for executable binary file analysis

PHP Static Analysis in Github Actions.

JAW: A Graph-based Security Analysis Framework for JavaScript and Client-side CSRF

PHP_CodeSniffer is a set of two PHP scripts; the main phpcs script that tokenizes PHP, JavaScript and CSS files to detect violations of a defined coding standard, and a second phpcbf script to automatically correct coding standard violations. PHP_CodeSniffer is an essential development tool that ensures your code remains clean and consistent.

Docker image for Alpine Linux with latest ShellCheck, a static analysis tool for shell scripts.

Policeman's Forbidden API Checker

Static Analyzer for LLVM bitcode based on Abstract Interpretation

Various code metrics for Python code

coala base docker image

Static and dynamic Android application security analysis

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

PHPStan extension for webmozart/assert

OCCAM: Object Culling and Concretization for Assurance Maximization

Defund the Police.

Analyzer of security features in executable binaries

persistent monitor (for static source code analysis, GCC based)

Automated static analysis & linting bot for Mozilla repositories

Semgrep rules registry

A static analysis tool for finding errors in PHP applications