Java Static Analysis

Open-source Java projects categorized as Static Analysis
Edit details
Topics: Java Code Analysis static-code-analysis Code Quality HacktoberFest
Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
Sponsored

Top 23 Java Static Analysis Projects

  • bytecode-viewer

    A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

  • SonarQube

    Continuous Inspection

    • Project mention: Experience Continuous Integration with Jenkins | Ansible | Artifactory | SonarQube | PHP | dev.to | 2024-02-24

    SonarQube (Scroll down to the Sonarqube section to see instructions on how to set up and configure SonarQube manually)

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • Checkstyle

    Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

  • Error Prone

    Catch common Java mistakes as compile-time errors

    • Project mention: Any library you would like to recommend to others as it helps you a lot? For me, mapstruct is one of them. Hopefully I would hear some other nice libraries I never try. | /r/java | 2023-05-27

    error-prone is good for some extra static analysis.

  • Recaf

    The modern Java bytecode editor

  • PMD

    An extensible multilanguage static code analyzer.

    • Project mention: PMD 7 Is Here | news.ycombinator.com | 2024-03-22

  • NullAway

    A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • Spotbugs

    SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

  • soot

    Soot - A Java optimization framework

  • find-sec-bugs

    The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

  • Spoon

    Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

    • Project mention: I introduced Rust at work | /r/rust | 2023-06-29

    Spoon

  • phpinspectionsea

    A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

    • Project mention: PHP RFC: Deprecations for PHP 8.3 | /r/PHP | 2023-05-30

    (I actually held the same opinion as you until recently: https://github.com/kalessil/phpinspectionsea/issues/1718 tl;dr the performance impact is negligible)

  • pysonar2

    PySonar2: a semantic indexer for Python with interprocedual type inference

  • SonarJava

    :coffee: SonarSource Static Analyzer for Java Code Quality and Security

  • FlowDroid

    FlowDroid Static Data Flow Tracker

  • jspecify

    An artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.

    • Project mention: Java, null, and JSpecify [video link] | /r/java | 2023-12-11

    There's also a fair amount of content to explore starting at jspecify.org.

  • sonar-php

    :elephant: SonarPHP: PHP static analyzer for SonarQube & SonarLint

  • Modernizer

    Detect uses of legacy Java APIs

  • ck

    Code metrics for Java code by means of static analysis (by mauricioaniche)

  • RefactorFirst

    Identifies and prioritizes God Classes and Highly Coupled classes in Java codebases you should refactor first.

    • Project mention: 📢📢📢RefactorFirst 0.4.0 is released!!!📢📢📢 | /r/java | 2023-06-27

    Learn more at https://github.com/jimbethancourt/RefactorFirst

  • warnings-ng-plugin

    Jenkins Warnings Plugin - Next Generation

  • forbidden-apis

    Policeman's Forbidden API Checker

  • SkidSuite

    A collection of java reverse engineering tools and informational links

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Java Static Analysis related posts

Index

What are some of the best open-source Static Analysis projects in Java? This list will help you:

Project Stars
1 bytecode-viewer 14,338
2 SonarQube 8,543
3 Checkstyle 8,121
4 Error Prone 6,716
5 Recaf 5,543
6 PMD 4,663
7 NullAway 3,524
8 Spotbugs 3,331
9 soot 2,789
10 find-sec-bugs 2,201
11 Spoon 1,669
12 phpinspectionsea 1,427
13 pysonar2 1,367
14 SonarJava 1,088
15 FlowDroid 997
16 jspecify 408
17 sonar-php 372
18 Modernizer 359
19 ck 355
20 RefactorFirst 331
21 warnings-ng-plugin 327
22 forbidden-apis 313
23 SkidSuite 293

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com