A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

python flask security static-code-analysis static-analysis python3 abstract-syntax control-flow-graph dataflow program-analysis taint-analysis fixed-point abstract-syntax-tree taint pyt fixed-point-analysis dataflow-analysis

• Updated Dec 25, 2020
• Python

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

javascript android java static-code-analysis static-analysis callgraph program-analysis pointer-analysis slicing dataflow-analysis

• Updated Nov 12, 2026
• Java

A new version of Soot with a completely overhauled architecture

android java bytecode static-code-analysis static-analysis call-graph callgraph program-analysis call-graphs soot call-graph-analysis dataflow-analysis jimple callgraphs

• Updated Nov 12, 2026
• Java

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

llvm instrumentation taint-analysis dataflow-analysis taint-tracking

• Updated Jun 10, 2026
• C++

See where each character on the screen came from in code.

debugging dynamic-analysis dataflow-analysis

• Updated Dec 11, 2022
• JavaScript

Deterministic Privacy Code Scanner for GDPR Data Mapping Evidence and Proactive AI Governance

privacy scanner gdpr sast dataflow-analysis pii-detection ccpa eu-ai-act iso-42001

• Updated Nov 4, 2026
• Shell

Sophisticated static program analysis framework for the R programming language.

r linter static-analyzer r-language abstract-interpretation dataflow-analysis program-slicing program-comprehension static-program-analysis

• Updated Nov 11, 2026
• TypeScript

FLOWMATRIX: GPU-Assisted Information-Flow Analysis through Matrix-Based Representation, USENIX Security'22

binary-analysis program-analysis taint-analysis security-tools dataflow-analysis taint-tracking usenix-security-2022

• Updated Apr 17, 2023
• C++

use asm to parse classNode then get method invoke relations.解析获得方法调用链路

java static-analysis asm callgraph dfa dataflow-analysis

• Updated Oct 2, 2020
• Java

FlowBlot is static code analysis benchmark project by Codethreat, including sink-source challenges grouped into various technical analysis concepts.

benchmark static-analysis code-analysis application-security dataflow-analysis

• Updated Feb 9, 2024
• C#

A static analysis framework for Python

security static-analysis pointer-analysis dataflow-analysis ifds python-static-analysis

• Updated Nov 9, 2026
• Python

Automating Data processing workflow to serve users in a simple smart interface

data-science automation exploratory-data-analysis dataflow-analysis

• Updated Feb 21, 2025
• Python

Offline-first, multi-language SAST with semantic data-flow analysis, deterministic security rules, SARIF/PDF reporting, Docker isolation, and optional local Ollama enrichment.

docker security offline-first static-analysis application-security taint-analysis security-scanner semantic-analysis sarif security-tools devsecops software-composition-analysis source-code-analysis code-scanning sast dataflow-analysis semgrep agpl-3 local-llm ollama

• Updated Sep 13, 2026
• Python

Visualization of LLVM IR

graphviz llvm dataflow graphviz-dot llvm-ir dataflow-analysis

• Updated Aug 2, 2018
• LLVM

Local C4 architecture editor with Magic flows, docs & API contracts. Open-core Community edition by Quiet Grid Labs.

documentation mcp architecture api-documentation dataflow api-documentation-tool dataflow-analysis c4 structurizr api-doc mcp-server mcp-tools structurizr-alternative

• Updated Oct 26, 2026
• TypeScript

Static source code analyzer that extracts an interprocedural dataflow graph from Java source code.

software-engineering program-analysis source-code-analysis dataflow-analysis

• Updated Apr 30, 2023
• Java

A GCC plugin that finds memory leaks at compile time by walking GIMPLE IR to resolve alias variables

compiler cpp static-analyzer program-analysis memory-leak gcc-plugin dataflow-analysis gimple

• Updated Oct 16, 2026
• C++

A roslyn analyzer that enforces the use of await

roslyn static-analysis dataflow-analysis roslyn-analyzers

• Updated Nov 1, 2024
• C#

"Testing Static Analyses for Precision and Soundness". This is an artifact of our work accepted at the CGO 2020.

docker-image static-analysis verification dataflow z3 dfa precision llvm-ir z3-smt-solver dataflow-analysis llvm-compiler souper spec2017 soundness

• Updated Jan 8, 2020
• C

The aim of this project is to provide an example of a static code analyser and to remind people of the basics of creating languages.

scala analyser dataflow-analysis

• Updated Nov 10, 2026
• Scala