PHP Static Analysis Tool - discover bugs in your code without running it!

• UpdatedMar 26, 2025
• PHP

Mirror kept for legacy. Moved tohttps://github.com/llvm/llvm-project

• UpdatedApr 23, 2020
• C++

EMBA - The firmware security analyzer

• UpdatedMar 25, 2025
• Shell

Beautiful and understandable static analysis tool for PHP

• UpdatedFeb 10, 2025
• PHP

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

• UpdatedMar 26, 2025
• Python

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

• UpdatedMar 18, 2025
• PHP

BinAbsInspector: Vulnerability Scanner for Binaries

• UpdatedJun 17, 2024
• Java

Static Value-Flow Analysis Framework for Source Code

• UpdatedMar 26, 2025
• C++

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

• UpdatedSep 26, 2024
• Java

Next-gen phpDoc parser with support for intersection types and generics

• UpdatedMar 24, 2025
• PHP

Cross-platform static analyzer and linter for Swift.

• UpdatedFeb 27, 2021
• Java

cwe_checker finds vulnerable patterns in binary executables

• UpdatedDec 17, 2024
• Rust

☕ SonarSource Static Analyzer for Java Code Quality and Security

• UpdatedMar 25, 2025
• Java

SonarSource Static Analyzer for JavaScript and TypeScript

• UpdatedMar 26, 2025
• TypeScript

Code analyzer for C# and VB.NET projects

• UpdatedMar 25, 2025
• C#

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

• UpdatedJan 17, 2025
• Go

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.

• UpdatedApr 11, 2024
• Go

Doctrine extensions for PHPStan

• UpdatedMar 24, 2025
• PHP

🕵️ Haskell STatic ANalyser

• UpdatedJan 20, 2025
• Haskell

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…

• UpdatedApr 10, 2022
• Go