GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Tools
  • Blog
  • Sponsors
  • Contributing
  • FAQ
  • Languages
  • Open Collective

This view

  • Original page
  • New address

GeezerVison is showing analysis-tools.dev — Compare 700+ Linters, Static Analysis Tools And Code Formatters

Languages

  • Python (148)
  • Java (145)
  • JavaScript (133)
  • Php (129)
  • C (127)
  • Cpp (125)
  • Go (121)
  • Ruby (90)
  • TypeScript (88)
  • Csharp (87)

Categories

  • Formatter
  • Linter

Types

  • Commandline Tool (CLI)
  • SaaS / Service
  • IDE-Plugin

License

  • All
  • MIT License
  • GNU License
  • Proprietary (Non-Free)

Pricing

  • Free for Open Source
  • Free Plan
  • Plans Available

Other Tags

  • All
  • Ai-generated-code
  • Ansible
  • Api
  • Archive

You Can Contribute!

You can help to improve this list by voting for your favorite tools or adding new ones on Github GitHub

Suggest a tool

Latest from our Blog

Introducing Pixee as Our Sponsor: Automated Security and Code Quality with Pixeebot

Sat May 25 2024

As developers, maintaining secure, high-quality code is challenging. Security vulnerabilities, performance issues, and code quality concerns can accumulate. Enter Pixeebot, a tool by Pixee that automates security and code improvements, letting developers focus on essential tasks.

Read more

A Closer Look At BugProve

Sun Nov 19 2023

I have never been a huge fan of IoT devices. Granted, they make our life easier, but they also open the door to a lot of security issues. Most IoT devices are black boxes. I don't know what's inside and I don't know what they connect to.

Read more

Welcoming Bearer as Our Sponsor: Simple Ruby and JavaScript App Security

Thu Apr 06 2023

As a developer, I have faced my fair share of security mishaps. I recall times when I accidentally exposed sensitive data in logs or sent a network request over a non-encrypted HTTP channel when HTTPS was available. I'm sure many of you can relate to these situations. We may not be security experts, but that doesn't mean we shouldn't take measures to protect our applications. This is where Bearer, a new security tool for Ruby and JavaScript apps (Java coming soon), comes into play.

Read more

Redesigning Analysis Tools

Wed Mar 29 2023

We are happy to announce that we completely rebuilt analysis-tools.dev from scratch with more features and a new design!This is a major milestone for us, as it marks the first time we sat down to reinvision what the project should become in the next few years.

Read more

Picking the Right Static Analysis Tool For Your Use-Case

Tue Jan 26 2021

This project started as a way to scratch my own itch:Years later, many people still seem to have the same problem. There are more than 500 static analysis (SAST) tools out there; how can you possibly find the "best" one?

Read more

Static Analysis Is Broken - Let’s Fix It!

Wed Aug 19 2020

Static analysis is great! It helps improve code quality by inspecting source code without even running it. There are hundreds of great tools to choose from — many are free or open-source. Unfortunately, many projects still don’t make use of static analysis tools for various reasons.

Read more

Our Mission

Thu Jul 16 2020

We found that static code analysis is a topic that is attracting a lot of engineers, which care about code-quality and solid engineering standards. Our goal is to create an open community for developers that want to take their code and skill set to the next level.

Read more

Welcome, DeepCode!

Thu Jul 16 2020

Today we welcome DeepCode as our first sponsor.It makes us incredibly happy to see the backing of our community project from such a forward-thinking company. Just like us, DeepCode thinks that the space of analysis tools could be vastly improved to increase code quality and foster best practices within organizations of any size.

Read more
Show all

Stay Informed

Sign up to our newsletter and always stay up to date with the latest tools and trends in development

Static Analysis Tools

825 tools
Sort by:

Filter Tools

Sort By

Sort By

Languages

Choose Language

Categories

Choose Category

Type

Choose Type

Licenses

Choose License

Pricing

Choose Pricing

Other Tags

Other Tags
207

Black

The uncompromising Python code formatter.

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedformatter
  • 87% upvoted
139

Mega-Linter

Mega-Linter can handle any type of project thanks to its 70+ embedded Linters, its advanced reporting, runnable on any CI system or locally, with assisted installation and configuration, able to apply formatting and fixes

  • dotnet
  • apex
  • c
  • csharp
  • cpp
  • clojure
  • coffeescript
  • dart
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 67% upvoted
101

clippy

A code linter to catch common mistakes and improve your Rust code.

  • rust
  • MaintainedMaintained
  • MaintainedRust
  • Maintainedcli
  • Maintainedlinter
  • 93% upvoted
96

mypy

A static type checker that aims to combine the benefits of duck typing and static typing, frequently used with MonkeyType.

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedlinter
  • 91% upvoted
89

Semgrep

A fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Its rules look like the code you already write; no abstract syntax trees or regex wrestling. Supports 17+ languages.

  • c
  • csharp
  • go
  • java
  • javascript
  • jsx
  • ocaml
  • php
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • MaintainedcliMaintainedservice
  • Maintainedlinter
  • 77% upvoted
87

Teamscale

Static and dynamic analysis tool supporting more than 25 languages and direct IDE integration. Free hosting for Open Source projects available on request. Free academic licenses available.

  • abap
  • c
  • csharp
  • cpp
  • java
  • ci
  • MaintainedMaintained
  • MaintainedMulti-Language
  • MaintainedserviceMaintainedide-plugin
  • Maintainedlinter
  • 79% upvoted
73

ESLint

An extensible linter for JS, following the ECMAScript standard.

  • javascript
  • jsx
  • typescript
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 89% upvoted
69

go vet

Examines Go source code and reports suspicious.

  • go
  • MaintainedMaintained
  • MaintainedGo
  • Maintainedcli
  • Maintainedlinter
  • 89% upvoted
67

PHPStan

PHP Static Analysis Tool - discover bugs in your code without running it!

  • php
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 91% upvoted
61

flake8

A wrapper around pyflakes, pycodestyle and mccabe.

  • python
  • meta
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedmeta
  • 90% upvoted
60

cppcheck

Static analysis of C/C++ code.

  • c
  • cpp
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 83% upvoted
59

Bearer

Open-Source static code analysis tool to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). Highly configurable and easily extensible, built for security and engineering teams.

  • c
  • go
  • java
  • javascript
  • jsx
  • ruby
  • typescript
  • ci
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 89% upvoted
50

pylint

Looks for programming errors, helps enforcing a coding standard and sniffs for some code smells. It additionally includes pyreverse (an UML diagram generator) and symilar (a similarities checker).

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedlinter
  • 85% upvoted
47

clang-tidy

Clang-based C++ linter tool with the (limited) ability to fix issues, too.

  • c
  • cpp
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 90% upvoted
46

Psalm

Static analysis tool for finding type errors in PHP applications.

  • php
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 96% upvoted
45

RuboCop

A Ruby static code analyzer, based on the community Ruby style guide.

  • ruby
  • MaintainedMaintained
  • MaintainedRuby
  • Maintainedcli
  • Maintainedlinter
  • 91% upvoted
42

GitGuardian ggshield

ggshield is a CLI application that runs in your local environment or in a CI environment to help you detect more than 350+ types of secrets, as well as other potential security vulnerabilities or policy breaks affecting your codebase.

  • dotenv
  • container
  • ci
  • git
  • security
  • terraform
  • MaintainedMaintained
  • MaintainedMulti-Language
  • MaintainedcliMaintainedservice
  • Maintainedlinter
  • 100% upvoted
41

rust-analyzer

Supports functionality such as 'goto definition', type inference, symbol search, reformatting, and code completion, and enables renaming and refactorings.

  • rust
  • MaintainedMaintained
  • MaintainedRust
  • Maintainedide-plugin
  • Maintainedformatter
  • 94% upvoted
40

ruff

Fast Python linter, written in Rust. 10-100x faster than existing linters. Compatible with Python 3.10. Supports file watcher.

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedlinter
  • 98% upvoted
38

GolangCI-Lint

Fast linters runner for Go. It aggregates multiple Go linters and provides a unified configuration, caching, and output format. Alternative to Go Meta Linter.

  • go
  • MaintainedMaintained
  • MaintainedGo
  • Maintainedcli
  • Maintainedlinter
  • 80% upvoted
37

CogniCrypt

Checks Java source and byte code for incorrect uses of cryptographic APIs.

  • java
  • DeprecatedDeprecated
  • DeprecatedJava
  • Deprecatedcli
  • Deprecatedlinter
  • 100% upvoted
36

cargo-audit

Audit Cargo.lock for crates with security vulnerabilities reported to the RustSec Advisory Database.

  • rust
  • MaintainedMaintained
  • MaintainedRust
  • Maintainedcli
  • Maintainedlinter
  • 89% upvoted
36

Sonatype

Reports known vulnerabilities in common dependencies and recommends updated packages to minimize breaking changes

  • c
  • csharp
  • cpp
  • clojure
  • coffeescript
  • fsharp
  • go
  • groovy
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 70% upvoted
32

Prettier

An opinionated code formatter.

  • javascript
  • typescript
  • html
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedformatter
  • 90% upvoted
32

staticcheck

Go static analysis that specialises in finding bugs, simplifying code and improving performance.

  • go
  • MaintainedMaintained
  • MaintainedGo
  • Maintainedcli
  • Maintainedlinter
  • 88% upvoted
31

PVS-Studio

PVS-Studio is a SAST tool that enhances code quality, security, and safety. Supported languages: C, C++, C#, Java, Go, JavaScript and TypeScript. Works on Windows, macOS, Linux. Supports intermodular, incremental, data flow analysis, taint analysis. Provides compliance with OWASP TOP 10, MISRA C/C++, CWE, and SEI CERT. Conditionally free for FOSS and has trial version.

  • dotnet
  • c
  • csharp
  • cpp
  • go
  • java
  • javascript
  • typescript
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 90% upvoted
26

ThreatMapper

Vulnerability Scanner and Risk Evaluation for containers, serverless and hosts at runtime. ThreatMapper generates runtime BOMs from dependencies and operating system packages, matches against multiple threat feeds, scans for unprotected secrets, and scores issues based on severity and risk-of-exploit.

  • dotnet
  • go
  • java
  • javascript
  • php
  • python
  • ruby
  • rust
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 84% upvoted
25

bandit

A tool to find common security issues in Python code.

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedlinter
  • 82% upvoted
25

rustfmt

A tool for formatting Rust code according to style guidelines.

  • rust
  • MaintainedMaintained
  • MaintainedRust
  • Maintainedcli
  • Maintainedformatter
  • 96% upvoted
25

SAST Online

Check the Android Source code thoroughly to uncover and address potential security concerns and vulnerabilities. Static application security testing (Static Code Analysis) tool Online

  • dart
  • java
  • kotlin
  • mobile
  • security
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 90% upvoted
24

PHP Coding Standards Fixer

Fixes your code according to standards like PSR-1, PSR-2, and the Symfony standard.

  • php
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 96% upvoted
23

CodeScene

CodeScene is a quality visualization tool for software. Prioritize technical debt, detect delivery risks, and measure organizational aspects. Fully automated.

  • c
  • csharp
  • cpp
  • clojure
  • dart
  • elixir
  • erlang
  • go
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 63% upvoted
23

TypeScript Call Graph

CLI to generate an interactive graph of functions and calls from your TypeScript files

  • typescript
  • DeprecatedDeprecated
  • DeprecatedTypescript
  • Deprecatedcli
  • Deprecatedlinter
  • 67% upvoted
22

Sigrid

Sigrid helps you to improve your software by measuring your system's code quality, and then compares the results against a benchmark of thousands of industry systems to give you concrete advice on areas where you can improve.

  • c
  • csharp
  • cpp
  • delphi
  • go
  • groovy
  • java
  • javascript
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • MaintainedcliMaintainedservice
  • Maintainedlinter
  • 89% upvoted
21

composer-dependency-analyser

Fast detection of composer dependency issues.

  • 💪 Powerful: Detects unused, shadow and misplaced composer dependencies
  • ⚡ Performant: Scans 15 000 files in 2s!
  • ⚙️ Configurable: Fine-grained ignores via PHP config
  • 🕸️ Lightweight: No composer dependencies
  • 🍰 Easy-to-use: No config needed for first try
  • ✨ Compatible: PHP >= 7.2
  • php
  • ci
  • package
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 100% upvoted
21

diktat

Strict coding standard for Kotlin and a linter that detects and auto-fixes code smells.

  • kotlin
  • DeprecatedDeprecated
  • DeprecatedKotlin
  • Deprecatedcli
  • DeprecatedlinterDeprecatedformatter
  • 84% upvoted
21

phan

A modern static analyzer from etsy.

  • php
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 92% upvoted
20

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications.

  • ruby
  • security
  • MaintainedMaintained
  • MaintainedRuby
  • Maintainedcli
  • Maintainedlinter
  • 95% upvoted
19

Php Inspections (EA Extended)

A Static Code Analyzer for PHP.

  • php
  • MaintainedMaintained
  • MaintainedPhp
  • Maintainedcli
  • Maintainedlinter
  • 95% upvoted
18

gofmt -s

Checks if the code is properly formatted and could not be further simplified.

  • go
  • MaintainedMaintained
  • MaintainedGo
  • Maintainedcli
  • MaintainedlinterMaintainedformatter
  • 82% upvoted
18

SQLFluff

Multiple dialect SQL linter and formatter.

  • sql
  • MaintainedMaintained
  • MaintainedSql
  • Maintainedcli
  • MaintainedlinterMaintainedformatter
  • 78% upvoted
17

Frama-C

A sound and extensible static analyzer for C code.

  • c
  • MaintainedMaintained
  • MaintainedC
  • Maintainedcli
  • Maintainedlinter
  • 76% upvoted
17

trunk

Modern repositories include many technologies, each with its own set of linters. With 30+ linters and counting, Trunk makes it dead-simple to identify, install, configure, and run the right linters, static analyzers, and formatters for all your repos.

  • c
  • cpp
  • go
  • java
  • javascript
  • python
  • ruby
  • rust
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • MaintainedlinterMaintainedformatter
  • 77% upvoted
16

Coverity

Synopsys Coverity supports 20 languages and over 70 frameworks including Ruby on rails, Scala, PHP, Python, JavaScript, TypeScript, Java, Fortran, C, C++, C#, VB.NET.

  • c
  • csharp
  • cpp
  • fortran
  • java
  • javascript
  • php
  • python
  • more
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 63% upvoted
16

DeepSource

In-depth static analysis to find issues in verticals of bug risks, security, anti-patterns, performance, documentation and style. Native integrations with GitHub, GitLab and Bitbucket. Less than 5% false positives.

  • go
  • javascript
  • python
  • ruby
  • sql
  • configmanagement
  • container
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • Maintainedlinter
  • 69% upvoted
16

Pixee

Pixeebot finds security and code quality issues in your code and creates merge-ready pull requests with recommended fixes.

  • java
  • python
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedservice
  • 94% upvoted
16

pyright

Static type checker for Python, created to address gaps in existing tools like mypy.

  • python
  • MaintainedMaintained
  • MaintainedPython
  • Maintainedcli
  • Maintainedlinter
  • 86% upvoted
15

SwiftLint

A tool to enforce Swift style and conventions.

  • swift
  • MaintainedMaintained
  • MaintainedSwift
  • MaintainedcliMaintainedide-plugin
  • Maintainedlinter
  • 100% upvoted
14

CppDepend

Measure, query and visualize your code and avoid unexpected issues, technical debt and complexity.

  • c
  • cpp
  • MaintainedMaintained
  • MaintainedMulti-Language
  • Maintainedcli
  • Maintainedlinter
  • 82% upvoted
14

detekt

Static code analysis for Kotlin code.

  • kotlin
  • MaintainedMaintained
  • MaintainedKotlin
  • Maintainedcli
  • Maintainedlinter
  • 100% upvoted
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.