Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
An extensible multilanguage static code analyzer.
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
T.J. Watson Libraries for Analysis, with frontends for Java, Android, and JavaScript, and may common static program analyses
Droidefense: Advance Android Malware Analysis Framework
Jenkins Warnings Plugin - Next Generation
Policeman's Forbidden API Checker
Static code review for your Gerrit patchsets. Runs Checkstyle, PMD, FindBugs, Scalastyle, CodeNarc, JSLint for you!
Type Analyzer for JavaScript
Static code analysis for CFML (a linter)
walkmod: an open source tool to fix coding style issues
Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
Java library for parsing report files from static code analysis.
Add a description, image, and links to the static-code-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-code-analysis topic, visit your repo's landing page and select "manage topics."