CAST Highlight ©️ — Commercial Static Code Analysis which runs locally, but uploads the results to its cloud for presentation. Checkmarx CxSAST ©️ — Commercial Static Code Analysis which doesn't require pre-compilation. ClassGraph — A classpath and module path scanner for querying or visualizing class metadata or class relatedness.

For static analysis tools I often use CPD, PMD, FindBugs, and Checkstyle. CPD is the PMD "Copy/Paste Detector" tool. I was using PMD for a little while before I noticed the "Finding Duplicated Code" link on the PMD web page. I'd like to point out that these tools can sometimes be extended beyond their "out-of-the-box" set of rules.

Apr 29, 2025 · ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality. analysis static-code-analysis linter static-analysis awesome-list code-quality static-analyzers hacktoberfest sast

Sep 19, 2008 · You can try JavaDepend, it complement other static analysis tools, and provides a CQL language to query code like database, JavaDepend provides also many interactive views to understand the existing code base and more than 82 metrics.

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program. - Java static code analysis tools · checkstyle/checkstyle Wiki

Jul 30, 2015 · Some very interesting tools providing static source code analysis of your project exist out there. However, I did not find any tool for Java Card. Java Card has some very specific issues, especially: Memory usage issues (RAM vs EEPROM)

The higher the score, the more pain the code is in. laser [OSS] - Static analysis and style linter for Ruby code. Mondrian [OSS] - a set of static analysis and refactoring tools for more abstraction; pelusa [OSS] - Static analysis Lint-type tool to improve your OO Ruby code

Mar 5, 2012 · I have developed an Android app using the Eclipse IDE and now the code count has grown very huge. I want to do the code review using a static code analysis tool to help me find any silly mistakes in the code such duplicate code, exception handling errors etc. It should be pluggable within the Eclipse IDE.

Dec 8, 2013 · The purpose of Sonar is to agregate results from all the core analysis engines (like PMD, Findbugs, Checkstyle), so that's why Sonar embeds all those tools, plus many more. So my advice would be to set up a continuous inspection server based on Sonar, and don't worry about any other tool as you'll get the best of all of them with Sonar.

SourceMeter ©️ — Static Code Analysis for C/C++, Java, C#, Python, and RPG III and RPG IV versions (including free-form). sqlvet — Performs static analysis on raw SQL queries in your Go code base to surface potential runtime errors. It checks for SQL syntax error, identifies unsafe queries that could potentially lead to SQL injections ...