Maven
SonarSource/sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Custom licenseSep 9, 2026 · metrics 2.10.0
All tags
Catalogue tag
#static-analyzer
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
16 records
Maven
SonarSource/sonar-dotnet
Code analyzer for C# and VB.NET projects
Custom licenseSep 15, 2026 · metrics 2.10.0
Packagist
phpstan/phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
MITOct 20, 2026 · metrics 2.10.0
Packagist · npm
phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
MITOct 20, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-doctrine
Doctrine extensions for PHPStan
MITAug 27, 2026 · metrics 2.10.0
npm
flowr-analysis/flowr
Sophisticated static program analysis framework for the R programming language.
GPL-3.0Sep 10, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-nette
Nette Framework class reflection extension for PHPStan & framework-specific rules
MITSep 12, 2026 · metrics 2.10.0
Packagist
phpmetrics/PhpMetrics
Beautiful and understandable static analysis tool for PHP
MITSep 19, 2026 · metrics 2.10.0
—
vbpf/prevail
eBPF verifier based on abstract interpretation
MITOct 2, 2026 · metrics 2.10.0
Packagist
phpmd/phpmd
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
ajinabraham/njsscan
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
LGPL-3.0Sep 21, 2026 · metrics 2.10.0
Packagist
phpstan/phpstan-dibi
Dibi class reflection extension for PHPStan
MITOct 1, 2026 · metrics 2.10.0
Go
alexkohler/prealloc
prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
MITSep 16, 2026 · metrics 2.10.0
Go
alexkohler/nakedret
nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.
MITSep 16, 2026 · metrics 2.10.0
Go
ChmielewskiKamil/solbot
Solidity static analyzer and language server written from scratch in Go.
AGPL-3.0Aug 24, 2026 · metrics 2.10.0
npm · Maven
SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
Custom licenseSep 9, 2026 · metrics 2.10.0