Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

rust tree-sitter static-analysis program-analysis robdd uml-generator compiler-theory code-property-graph succinct-data-structures

• Updated Nov 10, 2026
• Rust

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

javascript c java scala cpp graph binary llvm code-analysis syntax-tree dataflow query-language cpg code-browser controlflow ghidra fuzzy-parsing code-property-graph javabytecode

• Updated Nov 12, 2026
• Scala

A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.

ruby python c java golang cpp graph analysis code llvm-ir cpg code-property-graph

• Updated Nov 12, 2026
• Kotlin

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.

security llvm static-analysis symbolic-execution program-analysis security-research code-property-graph

• Updated Oct 29, 2022
• Python

Code Property Graph (CPG) frontend for binary applications and libraries.

binary cpg code-property-graph

• Updated Oct 28, 2021
• Scala

LLVM meets Code Property Graphs

llvm llvm-bitcode cpg code-property-graph

• Updated Feb 27, 2021
• C++

Codyze is a static analyzer for Java, C, C++ based on code property graphs

static-analysis analyzer code-property-graph

• Updated Aug 4, 2026

Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various graph databases.

neo4j graph-databases janusgraph tinkergraph tigergraph amazon-neptune code-property-graph overflowdb

• Updated Oct 14, 2024
• Scala

The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.

kubernetes aws security cloud azure k8s cpg github-actions code-property-graph cloud-property-graph

• Updated Jan 22, 2025
• Kotlin

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

security static-analysis taint-analysis appsec sarif devsecops vulnerability-scanner sast code-property-graph llm

• Updated Sep 19, 2026
• Python

A static analysis tool for Java programs, based on the theory of code property graphs.

java static-analysis graph-traversal code-property-graph

• Updated Mar 27, 2023
• Java

A Python implementation of a language-agnostic Code Property Graph

python static-analysis graph-traversal cpg code-property-graph

• Updated Jun 10, 2024
• Python

Neo4J visualisation tool for the Code Property Graph

kotlin neo4j code-property-graph

• Updated May 17, 2021

chennai (chen N ai) is a hybrid AI agent and a terminal user interface for static analysis, data-flow tracing, and AI-assisted code and security analysis.

security static-analysis code-property-graph ai-agent code-hierarchy-representation

• Updated Nov 11, 2026
• Rust

Modernizr: agent skills for investigating legacy software with code property graphs, graph algorithms, and symbolic analysis.

formal-methods program-analysis joern ai-agents legacy-code code-property-graph software-modernization claude-code

• Updated Oct 18, 2026
• Shell

Examples of how to use Plume

neo4j janusgraph plume tinkergraph tigergraph code-property-graph overflowdb

• Updated Jun 6, 2022
• Scala

Static analysis tool that extracts architecture data from Kubernetes repos, builds multi-language code property graphs (Go, Python, TS, Rust), and runs security/architecture queries with taint analysis

python kubernetes golang security architecture static-analysis sarif sbom code-property-graph

• Updated Nov 12, 2026
• Go

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP — data- and taint-flow with source→sink witnesses, points-to, and guard/sink structure for security reasoning over source.

python c typescript mcp static-analysis code-analysis dataflow call-graph program-analysis taint-analysis appsec code-graph code-property-graph model-context-protocol

• Updated Oct 16, 2026
• Python

KarsaSec is a high-performance, pluggable Static Application Security Testing (SAST) platform for multi-language codebases. Features an advanced AST-based CPG (Code Property Graph) query engine, local hybrid RAG security remediation, and autonomous AI-agent workflows with zero-trust guardrails.

static-code-analysis static-analysis ast artificial-intelligence multi-language appsec python-security secure-coding security-tools devsecops zero-trust vulnerability-scanner sast ai-security rag code-security code-property-graph secure-coding-agent automatic-remediation

• Updated Aug 27, 2026
• Python

A Demo Program of Security Patch Identification with Graph Neural Networks.

detection-model graph-neural-networks code-property-graph security-patch

• Updated Aug 12, 2022
• Python