languagetool - Style and Grammar Checker for 25+ Languages

•    Java

---

LanguageTool is an Open Source proofreading software for English, French, German, Polish, Russian, and more than 20 other languages. It finds many errors that a simple spell checker cannot detect. LanguageTool is freely available under the LGPL 2.1 or later.

grammar natural-language natural-language-processing style-checker proofreading spellcheck static-analysis code-analysis static-code-analysis code-quality

Flow - A static type checker for JavaScript

•    OCaml

---

Adds static typing to JavaScript to improve developer productivity and code quality.

static-code-checker code-analysis code-quality

SpotBugs - FindBugs' successor, A tool for static analysis to look for bugs in Java code.

•    Java

---

SpotBugs is the spiritual successor of FindBugs, carrying on from the point where it left off with support of its community. SpotBugs is a program which uses static analysis to look for bugs in Java code.

findbugs static-analysis code-analysis static-code-analysis linter

JSHint - A Static Code Analysis Tool for JavaScript

•    Javascript

---

JSHint is a community-driven tool to detect errors in JavaScript code and enforce your team's coding conventions.

static-code-checker code-analysis code-quality lint

awesome-static-analysis - A curated list of static analysis tools, linters and code quality checkers for various programming languages

•    

---

This is a collection of static analysis tools and code quality checkers. Pull requests are very welcome! Note: ©️ stands for proprietary software. All other tools are Open Source. To the extent possible under law, Matthias Endler has waived all copyright and related or neighboring rights to this work. Title image Designed by Freepik.

static-analysis quality static-analyzers awesome linter list code-quality awesome-list programming-language

phpinspectionsea - A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

•    Java

---

This project is an OSS Static Code Analysis tool for PhpStorm (2016.2+) and Idea Ultimate. Some of inspections are expecting conditional statements (e.g. "if") to use group statement for wrapping body expressions. If this requirement is met then additional inspections are applied to the source code.

phpstorm static-analysis php7 awesome intellij intellij-plugin static-code-analysis static-analyzer phpstorm-plugin

credo - A static code analysis tool for the Elixir language with a focus on code consistency and teaching

•    Elixir

---

Credo is a static code analysis tool for the Elixir language with a focus on teaching and code consistency. It implements its own style guide.

elixir code-analysis static-analysis linter credo

PHPStan - PHP Static Analysis Tool - discover bugs in your code without running it!

•    PHP

---

PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code.PHPStan moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be checked before you run the actual line.

phpstan static-analysis php7 testing static-code-analysis static-analyzer

PMD - An extensible cross-language static code analyzer

•    Java

---

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, PLSQL, Apache Velocity, XML, XSL.

code-analysis code-quality static-analysis static-code-analysis duplicate-code

gosec - Golang security checker

•    Go

---

Inspects source code for security problems by scanning the Go AST. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License here.

security security-tools security-automation static-analysis static-code-analysis

checker-framework - Pluggable type-checking for Java

•    Java

---

The Checker Framework enhances Java's type system to make it more powerful and useful. This lets software developers detect and prevent errors in their Java programs. The Checker Framework includes compiler plug-ins ("checkers") that find bugs or verify their absence. It also permits you to write your own compiler plug-ins.

code-analysis static-code-analysis find-bugs

prealloc - prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated

•    Go

---

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated. Similar to other Go static analysis tools (such as golint, go vet), prealloc can be invoked with one or more filenames, directories, or packages named by its import path. Prealloc also supports the ... wildcard.

static-code-analysis static-analyzer static-analysis prealloc-suggestions slice

Codelyzer - Static analysis for Angular projects.

•    TypeScript

---

A set of tslint rules for static code analysis of Angular TypeScript projects.You can run the static code analyzer over web apps, NativeScript, Ionic, etc.

codelyzer angular tslint linting static-code-analysis style-guide angular-cli styleguide nglint lint

FindBugs - Static Analysis Tool for Java

•    Java

---

FindBugs uses static analysis to look for bugs in Java code. it can analyze programs compiled for any version of Java. Eclipse and Maven plugins are available. FindBugs has been downloaded more than 700,000 times.

code-quality static-analysis code-analysis

pylint - It's not just a linter that annoys you!

•    Python

---

Pylint is a Python static code analysis tool which looks for programming errors, helps enforcing a coding standard, sniffs for code smells and offers simple refactoring suggestions. It's highly configurable, having special pragmas to control its errors and warnings from within your code, as well as from an extensive configuration file. It is also possible to write your own plugins for adding your own checks or for extending pylint in one way or another.

static-analysis linter static-code-analysis code-quality pep8

eslint-config-standard - ESLint Config for JavaScript Standard Style

•    Javascript

---

Shareable configs are designed to work with the extends feature of .eslintrc files. You can learn more about Shareable Configs on the official ESLint website.Note: We omitted the eslint-config- prefix since it is automatically assumed by ESLint.

development ecmascript es6 eslint linter standard static-code-analysis style-guide nodejs javascript-standard-style check checker code code-checker code-linter code-standards code-style enforce eslintconfig hint jscs jshint lint policy quality simple standard-style style style-checker style-linter verify

Mobile-Security-Framework-MobSF - Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing

•    Python

---

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static, dynamic and malware analysis. It can be used for effective and fast security analysis of Android, iOS and Windows mobile applications and support both binaries (APK, IPA & APPX ) and zipped source code. MobSF can do dynamic application testing at runtime for Android apps and has Web API fuzzing capabilities powered by CapFuzz, a Web API specific security scanner. MobSF is designed to make your CI/CD or DevSecOps pipeline integration seamless. Your generous donations will keep us motivated.

static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security mobile-security-framework api-testing web-security malware-analysis runtime-security ci-cd devsecops apk ipa

SPDisposeCheck Static Code Analysis Ruleset for Visual Studio 2012

•    

---

SPDisposeCheck Static Code Analysis Ruleset allows SharePoint 2010 developers to ensure SharePoint APIs are properly disposed using Visual Studio 2012.

sharepoint sharepoint-2010 spdisposecheck static-code-analysis visual-studio-2012

csslint - Automated linting of Cascading Stylesheets

•    Javascript

---

CSSLint is an open source CSS code quality tool originally written by Nicholas C. Zakas and Nicole Sullivan. It was released in June 2011 at the Velocity conference.A lint tool performs static analysis of source code and flags patterns that might be errors or otherwise cause problems for the developer.

static-code-analysis static-analysis lint css-lint

StaCoAn - StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications

•    Javascript

---

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications*. This tool was created with a big focus on usability and graphical guidance in the user interface.

bugbounty security security-tools mobile-security static-code-analysis