#static analysis

SeaHorn is an analysis framework for LLVM-based languages, emphasizing features such as abstract interpretation and context-sensitive pointer analysis, alongside SMT and CHC-based model checking approaches. Primarily built for automated verification research, it offers customizable tools and examples for bespoke verification needs. Users can utilize a Python script to verify C programs, create counterexamples, and assess code complexity. The framework is compatible with Linux and macOS, with Docker available for streamlined installation. Discover SeaHorn's functionality through its detailed command-line interface and adaptable components aimed at accurate verification outcomes.

This CLI tool offers developers an efficient solution for assessing PHP project size with ease, supporting PHP 7.2+ without any dependencies. It produces JSON outputs for versatile processing and allows inspection of longest files. By excluding vendor directories by default, it ensures clean data analysis. For detailed assessments, tools like PHPStan can be used alongside this simple yet powerful utility.

NilAway is a static analysis tool that aims to identify and address nil panics in Go applications at compile time. Designed with advanced error tracking across packages, it provides fast, automated analyses that require no additional input from developers apart from regular Go code. This tool supports integration with golangci-lint and bazel/nogo, making it suitable for large projects with minimal performance impact.

PHP Architecture Tester is an intuitive static analysis tool for verifying architectural compliance. It allows for the seamless creation and verification of architectural rules in PHP code using natural language. Open source and community-driven, it is suited for enhancing software architecture. Note: Early-stage releases (0.x.x) might introduce breaking changes as per Semantic Versioning 2.0. Visit phpat.dev for detailed documentation and examples.

Provides comprehensive static analysis for @Composable functions using ktlint and detekt, aiding in Jetpack Compose adoption. Originating from a Twitter fork, this project efficiently identifies issues before code review, streamlining team workflows. Detailed documentation and custom rules support developers in maintaining quality and avoiding common mistakes in Compose. The project welcomes contributions for ongoing improvements. More information is available on the project website.

PhpStorm attributes facilitate advanced PHP 8 coding by offering improved code completion and analysis from version 2020.3 onwards. These attributes, such as #[Deprecated] for signaling future removal of entities, #[ArrayShape] for specifying array keys and types, #[ObjectShape] for detailing object fields, #[Immutable] to maintain property constancy, and #[Pure] for identifying non-side-effect functions, enhance development processes. Additional attributes include #[ExpectedValues] for refining parameter specifications, #[NoReturn] for designating execution-ending functions, and #[Language] for enhanced handling of language-specific strings.

ast-grep is a command-line tool specializing in code pattern search, syntax verification, and transformation through abstract syntax trees (AST) from tree-sitter. It facilitates static code analysis and extensive code modifications using straightforward pattern matching similar to coding syntax. The utility supports installation across multiple platforms, including npm, pip, cargo, homebrew, scoop, and MacPorts. Featuring a jQuery-style API for AST navigation and modification, ast-grep is designed to make AST manipulation accessible. It assists developers in implementing coding standards and managing code changes effectively.