Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- Stars
- 17.1k
- Last commit
- 12 days ago
- Licence
- LGPL-2.1
Open-source alternatives to SonarQube
Code quality and security analysis across many programming languages.
4 open-source swaps29.2k GitHub stars between them
The open-source options, most starred first
Read from GitHub. Check the licence and what each one covers before you switch.
An extensible multilanguage static code analyzer.
- Stars
- 5,512
- Last commit
- 9 days ago
- Licence
- Custom
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- Stars
- 3,960
- Last commit
- 9 days ago
- Licence
- LGPL-2.1
MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository…
- Stars
- 2,615
- Last commit
- 9 days ago
- Licence
- AGPL-3.0
