Static program analysis (or static analysis) is the analysis of computer programs performed without executing them, in contrast with dynamic program analysis, which is performed on programs during their execution.
Find and fix problems in your JavaScript code.
An extremely fast Python linter, written in Rust.
A static analyzer for Java, C, C++, and Objective-C
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
PHP Static Analysis Tool - discover bugs in your code without running it!
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Golang security checker
Prevent Kubernetes misconfigurations from reaching production (again
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Bandit is a tool designed to find common security issues in Python code.
It's not just a linter that annoys you!
An extensible multilanguage static code analyzer.
A static type analyzer for Python code
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.