|Analysis Tools Bot 7c6baeb8fe||1 day ago|
|.github||1 week ago|
|data||1 day ago|
|CONTRIBUTING.md||1 week ago|
|Makefile||1 week ago|
|README.md||1 day ago|
This repository lists static analysis tools for all programming languages, build tools, config files and more.
The official website, analysis-tools.dev is based on this repository and adds rankings, user comments, and additional resources like videos for each tool.
Static program analysis is the analysis of computer software that is performed without actually executing programs — Wikipedia
The most important thing I have done as a programmer in recent years is to aggressively pursue static code analysis. Even more valuable than the hundreds of serious bugs I have prevented with it is the change in mindset about the way I view software reliability and code quality. — John Carmack (Creator of Doom)
This project would not be possible without the generous support of our sponsors.
If you also want to support this project, head over to our Github sponsors page.
Pull requests are very welcome!
Also check out the sister project, awesome-dynamic-analysis.
Go Meta Linter: GolangCI-Lint is a linters aggregator.
churn-php ⚠️ - Helps discover good candidates for refactoring.
dephpend - Dependency analysis tool.
deprecation-detector - Finds usages of deprecated (Symfony) code.
deptrac - Enforce rules for dependencies between software layers.
DesignPatternDetector - Detection of design patterns in PHP code.
GrumPHP - Checks code on every commit.
Mondrian - A set of static analysis and refactoring tools which use graph theory.
parallel-lint - This tool checks syntax of PHP files faster than serial check with a fancier output.
Parse - A Static Security Scanner.
pdepend - Calculates software metrics like cyclomatic complexity for PHP code.
phan - A modern static analyzer from etsy.
PHP Architecture Tester - Easy to use architecture testing tool for PHP.
PHP Assumptions - Checks for weak assumptions.
PHP Coding Standards Fixer - Fixes your code according to standards like PSR-1, PSR-2, and the Symfony standard.
PHP Insights - Instant PHP quality checks from your console. Analysis of code quality and coding style as well as overview of code architecture and its complexity.
Php Inspections (EA Extended) - A Static Code Analyzer for PHP.
PHP Refactoring Browser - Refactoring helper.
PHP Semantic Versioning Checker - Suggests a next version according to semantic versioning.
PHP-Parser - A PHP parser written in PHP.
php-speller - PHP spell check library.
PHP-Token-Reflection - Library emulating the PHP internal reflection.
php7cc ⚠️ - PHP 7 Compatibility Checker.
php7mar ⚠️ - Assist developers in porting their code quickly to PHP 7.
PHP_CodeSniffer - Detects violations of a defined set of coding standards.
phpca - Finds usage of non-built-in extensions.
phpcf - Finds usage of deprecated PHP features.
phpcpd - Copy/Paste Detector for PHP code.
phpdcd ⚠️ - Dead Code Detector (DCD) for PHP code.
PhpDependencyAnalysis - Builds a dependency graph for a project.
phpdoc-to-typehint - Add scalar type hints and return types to existing PHP projects using PHPDoc annotations.
phpDocumentor - Analyzes PHP source code to generate documentation.
phploc - A tool for quickly measuring the size and analyzing the structure of a PHP project.
PHPMD - Finds possible bugs in your code.
PhpMetrics - Calculates and visualizes various code quality metrics.
phpmnd - Helps to detect magic numbers.
PHPQA - A tool for running QA tools (phploc, phpcpd, phpcs, pdepend, phpmd, phpmetrics).
phpqa - jakzal - Many tools for PHP static analysis in one container.
phpqa - jmolivas - PHPQA all-in-one Analyzer CLI tool.
phpsa - Static analysis tool for PHP.
PHPStan - PHP Static Analysis Tool - discover bugs in your code without running it!
Progpilot - A static analysis tool for security purposes.
Psalm - Static analysis tool for finding type errors in PHP applications.
Qafoo Quality Analyzer - Visualizes metrics and source code.
Tuli - A static analysis engine.
twig-lint - twig-lint is a lint tool for your twig files.
WAP - Tool to detect and correct input validation vulnerabilities in PHP (4.0 or higher) web applications and predicts false positives by combining static analysis and data mining.
pep8) Check Python code against some of the style conventions in PEP 8.
pyreverse(an UML diagram generator) and
symilar(a similarities checker).
golangci-lintfor new projects.
#includerelations of a given set of files.