Top 5 OCaml Static Analysis Projects

infer

26 13,792 9.9 OCaml

A static analyzer for Java, C, C++, and Objective-C

Project mention: A quick look at free C++ static analysis tools | reddit.com/r/cpp | 2023-01-04

I notice there isn't fbinfer. It's pretty cool, and is used for this library.
semgrep

35 7,639 9.7 OCaml

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Project mention: returntocorp/semgrep: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code. | reddit.com/r/u_grouvi | 2023-01-10
InfluxDB

www.influxdata.com
sponsored

Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises.
pyre-check

3 6,208 9.9 OCaml

Performant type-checking for python.

Project mention: Ruby 3.2’s YJIT is Production-Ready | news.ycombinator.com | 2023-01-17

Python now has an optional type system and if you add one of them such as mypy or pyre to your CI process and you can configure GitHub to refuse the pull request until types are added you can make it somewhat strongly typed.
If you have a preexisting codebase I believe the way you can convert it is to add the types that you know on commits and eventually you will have enough types that adding the missing ones should be easy. For the missing ones Any is a good choice.
https://pyre-check.org and https://github.com/python/mypy are popular.
bap

2 1,771 8.9 OCaml

Binary Analysis Platform

Project mention: Any standard algorithms for parsing (disassembling) machine code? | reddit.com/r/compsci | 2022-05-13

BAP (https://github.com/binaryanalysisplatform/bap), angr (https://angr.io/) and others already do what you're asking for as more purpose-built solutions for dynamic analysis. Angr specifically in python.
bolt

3 415 0.0 OCaml

Bolt is a language with in-built data-race freedom! (by mukul-rathi)

Project mention: I wrote my own “proper” programming language | news.ycombinator.com | 2022-11-29
SonarQube

www.sonarqube.org
sponsored

Static code analysis for 29 languages.. Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-01-17.