Computer Science
7,622 items in 38 lists
-
sh pkg.go.dev
A shell parser, formatter, and interpreter with bash support; includes shfmt
-
gotype pkg.go.dev
Syntactic and semantic analysis similar to the Go compiler.
-
PHPStan phpstan.org
PHP Static Analysis Tool - discover bugs in your code without running it!
-
PhpMetrics phpmetrics.org
Calculates and visualizes various code quality metrics.
-
PHPMD phpmd.org
Finds possible bugs in your code.
-
phpDocumentor phpdoc.org
Analyzes PHP source code to generate documentation.
-
Phasar phasar.org
A LLVM-based static analysis framework which comes with a taint and type state analysis.
-
perltidy perltidy.sourceforge.net
Perltidy is a Perl script which indents and reformats Perl scripts to make them easier to read. The formatting can be controlled with command line parameters. The default parameter settings approximately follow the suggestions in the Perl Style Guide. Besides reformatting…
-
Klocwork perforce.com
copyright: — Quality and Security Static analysis for C/C++, Java and C#.
-
Helix QAC perforce.com
copyright: — Enterprise-grade static analysis for embedded software. Supports MISRA, CERT, and AUTOSAR coding standards.
-
Pascal Expert peganza.com
copyright: — IDE plugin for code analysis. Includes a subset of Pascal Analyzer reporting capabilities and is available for Delphi versions 2007 and later.
-
pdepend pdepend.org
Calculates software metrics like cyclomatic complexity for PHP code.
-
PC-lint pclintplus.com
copyright: — Static analysis for C/C++. Runs natively under Windows/Linux/MacOS. Analyzes code for virtually any platform, supporting C11/C18 and C++17.
-
parasoft parasoft.com
copyright: — Automated Software Testing Solutions for unit-, API-, and web UI testing. Complies with MISRA, OWASP, and others.
-
elm-review package.elm-lang.org
Analyzes whole Elm projects, with a focus on shareable and custom rules written in Elm that add guarantees the Elm compiler doesn't give you.
-
OWASP Source Code Analysis Tools owasp.org
List of tools maintained by the Open Web Application Security Project
-
OWASP Noir owasp-noir.github.io
Attack surface detector that identifies endpoints by static analysis.
-
Fortify opentext.com
copyright: — A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby…
-
OpenTaint opentaint.org
Open-source taint analysis engine for Java and Kotlin applications, formerly Seqra. Tracks data flow across function boundaries to find security vulnerabilities, with Spring support, YAML rules, and CI integrations.
-
NodeJSScan opensecurity.in
A static security code scanner for Node.js applications powered by libsast and semgrep that builds on the njsscan cli tool. It features a UI with various dashboards about an application's security status.
-
OpenSCAP open-scap.org
Suite of automated audit tools to examine the configuration and known vulnerabilities following the NIST-certified Security Content Automation Protocol (SCAP).
-
Offensive 360 offensive360.com
copyright: — Commercial Static Code Analysis system doesn't require building the source code or pre-compilation.
-
AppChecker npo-echelon.ru
copyright: — Static analysis for C/C++/C#, PHP and Java.
-
DrNim nim-lang.org
DrNim combines the Nim frontend with the Z3 proof engine in order to allow verify / validate software written in Nim.
-
NDepend ndepend.com
copyright: — Measure, query and visualize your code and avoid unexpected issues, technical debt and complexity.
-
MythX mythx.io
copyright: — MythX is an easy to use analysis platform which integrates several analysis methods like fuzzing, symbolic execution and static analysis to find vulnerabilities with high precision. It can be integrated with toolchains like Remix or VSCode or called from the…
-
mypy mypy-lang.org
A static type checker that aims to combine the benefits of duck typing and static typing, frequently used with MonkeyType.
-
MOPSA mopsa.lip6.fr
A static analyzer designed to easily reuse abstract domains across widely different languages (such as C and Python).
-
Mobb mobb.ai
copyright: — Mobb is a trusted, automatic vulnerability fixer that secures applications, reduces security backlogs, and frees developers to focus on innovation. Mobb is free for open-source projects.
-
Griffe mkdocstrings.github.io
Signatures for entire Python programs. Extract the structure, the frame, the skeleton of your project, to generate API documentation or find breaking changes in your API.
-
Perl::Critic metacpan.org
Critique Perl source code for best-practices.
-
Mega-Linter megalinter.io
Mega-Linter can handle any type of project thanks to its 70+ embedded Linters, its advanced reporting, runnable on any CI system or locally, with assisted installation and configuration, able to apply formatting and fixes
-
mdformat mdformat.rtfd.io
CommonMark compliant Markdown formatter
-
Polyspace Code Prover mathworks.com
copyright: — Provide code verification that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in C and C++ source code.
-
Polyspace Bug Finder mathworks.com
copyright: — Identifies run-time errors, concurrency issues, security vulnerabilities, and other defects in C and C++ embedded software.
-
Polyspace for Ada mathworks.com
copyright: — Provide code verification that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in source code.
-
mlint mathworks.com
copyright: — Check MATLAB code files for possible problems.
-
Mariana Trench mariana-tren.ch
Our security focused static analysis tool for Android and Java applications. Mariana Trench analyzes Dalvik bytecode and is built to run fast on large codebases (10s of millions of lines of code). It can find vulnerabilities as code changes, before it ever lands in your…
-
Malcat malcat.fr
copyright: — Hexadecimal editor and disassembler for malware analysis and binary file inspection. Supports over 50 file formats and multiple CPU architectures (x86/x64, MIPS, .NET, Python, VB p-code). Features rapid analysis, embedded file extraction, Yara signature scanning…
-
mago mago.carthage.software
Mago is a complete toolchain for PHP, written in Rust, designed from the ground up for maximum performance.
-
pyscn ludo-technologies.github.io
Intelligent Python code quality analyzer with CFG-based cyclomatic complexity analysis, dead code detection, clone detection (Type 1-4), and coupling metrics. Uses tree-sitter for parsing. Written in Go.
-
LintLang lintlang.ai
Static linter for natural-language instructions that control AI agents. Detects ambiguous tool descriptions, missing limits, conflicting directives, and schema gaps in local files and CI without model or network calls.
-
LDRA ldra.com
copyright: — A tool suite including static analysis (TBVISION) to various standards including MISRA C & C++, JSF++ AV, CWE, CERT C, CERT C++ & Custom Rules.
-
kube-score kube-score.com
Static code analysis of your Kubernetes object definitions.
-
ktlint ktlint.github.io
An anti-bikeshedding Kotlin linter with built-in formatter.
-
Stan kowainik.github.io
Stan is a command-line tool for analysing Haskell projects and outputting discovered vulnerabilities in a helpful way with possible solutions for detected problems.
-
ktfmt kotlin.github.io
A program that reformats Kotlin source code to comply with the common community standard for Kotlin code conventions. A ktfmt IntelliJ plugin is available from the plugin repository. To install it, go to your IDE's settings and select the Plugins category. Click the Marketplace…
-
KLEE klee.github.io
A dynamic symbolic execution engine built on top of the LLVM compiler infrastructure. It can auto-generate test cases for programs such that the test cases exercise as much of the program as possible.
-
Kiuwan kiuwan.com
copyright: — Identify and remediate cyber threats in a blazingly fast, collaborative environment, with seamless integration in your SDLC. Python, C\C++, Java, C#, PHP and more.
-
Kin kinlab.ai
A graph-native code repository for people and AI agents. Kin parses supported languages into code entities and their relationships (calls, references, imports, inheritance) and versions them with the source. The kin CLI and an MCP server query the same graph for callers…
- next page of items loading…
