5000 Open source projects that are alternatives of or similar to Spotbugs

Static Analysis Compiler Plugin for Scala

A simple program which checks Python source files for errors

Static code review for your Gerrit patchsets. Runs Checkstyle, PMD, FindBugs, Scalastyle, CodeNarc, JSLint for you!

Documenting the explosion of packages in the standard ecosystem!

A linter for Clojure code that sparks joy.

Doctrine extensions for PHPStan

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

The Exakat Engine : smart static analysis for PHP

PHP Implementation of the VS Code Language Server Protocol 🆚↔🖥

Run a security scan on your terraform with the very nice https://github.com/liamg/tfsec

Kubernetes object analysis with recommendations for improved reliability and security

Find and fix problems in your JavaScript code.

Symfony extension for PHPStan

A Python utility / library to sort imports.

Chronos - A static race detector for the go language

Define and run pattern-based custom linting rules.

Performing security tests inside your CI

SonarQube plugin for Kotlin

T.J. Watson Libraries for Analysis

Golang security checker

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.

Next-gen phpDoc parser with support for intersection types and generics

Vulnerability Patterns Detector for C# and VB.NET

Actionable code coverage - detects untested code blocks in recent changes

ShellCheck, a static analysis tool for shell scripts

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

SonarSource Static Analyzer for JavaScript and TypeScript

Gremlins tracker for Visual Studio Code: reveals invisible whitespace and other annoying characters

🐞 Primitive Erlang Security Tool

ESLint Shareable Config for JSX support in JavaScript Standard Style

cfmt is a tool to wrap Go comments over a certain length to a new line.

The most opinionated Go source code linter for code audit.

A linter that replay your developing style

SonarQube Java Properties Analyzer

Spoon is a metaprogramming library to analyze and transform Java source code (up to Java 15). 🥄 is made with ❤️, 🍻 and ✨. It parses source files to build a well-designed AST with powerful analysis and transformation API.

PySonar2: an advanced semantic indexer for Python

A curated list of awesome Go linters. More than 60 linters and tools!

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

Various code metrics for Python code

GopherCI was a project to help you maintain high-quality Go projects, by checking each GitHub Pull Request, for backward incompatible changes, and a suite of other third party static analysis tools.

Download ScriptAnalyzer from PowerShellGallery

Java library for parsing report files from static code analysis.

Style checker for sphinx (or other) rst documentation.

PHP Static Analysis Tool - discover bugs in your code without running it!

Extension for PHPStan to allow analysis of Drupal code.

The strictest and most opinionated python linter ever!

Combination of multiple linters to install as a GitHub Action

Feram finds & fixes bugs in your commits

a FindBugs/SpotBugs plugin for doing static code analysis for java code bases

Checks syntax of reStructuredText and code blocks nested within it

A tool to verify that your files are in harmony with your .editorconfig

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

nodejsscan is a static security code scanner for Node.js applications.

[DEPRECATED] Find Python web-app bugs delightfully fast, without changing your workflow. 🍱

A Ruby static code analyzer and formatter, based on the community Ruby style guide.

Java code analysis and linting with SQL

Command line tool to validate configuration files

Manage translation and localization with static analysis, for Ruby i18n

The leading static analyzer for Perl. Configurable, extensible, powerful.

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.