Open Source Source Code Analysis Tools - Page 5

Jadecy (Java Dependencies and Cycles) is a Java library to compute dependencies (elements depended on, or depending), strongly connected components, and cycles, in general directed graphs, or classes or packages dependencies graphs parsed from class files (major version <= 52, else does best effort). It uses Tarjan's algorithm for SCCs computation, and Johnson's algorithm for exhaustive cycles computation, with continuations instead of recursion, which allows to handle large graphs (< 2^31 vertices). Since version 1.1, can also compute shortest cycles covering all edges of SCCs. Usage from command line is also possible but with reduced flexibility (cf. JadecyMain class). API entry point for Java code dependencies is the Jadecy class, or DepUnit that makes use of it and is designed for unit tests. API entry point for general graph computations is the net.jadecy.graph package. Requires Java 5 or later. Also available on github: https://github.com/jeffhain/jadecy

Java Cobol Lexer take a cobol source program and return it as a list of lexical tokens. Library takes source code in fixed, free and mixed formats. It recognizes standard Cobol 85.

Java library to parse GNU Makefiles. The source code is available from SVN. The latest revision should be in trunk, the latest "stable" release should be in branch.

Java reverse-engineering plug-in for Eclipse Modelling project. Depends on JDK and UML2 eclipse projects. Supports JKD5, including enums and generics.

JavaCount is a simple (Code, Comments, Cyclomatic and Statements) counter for Java methods that ouput the metrics in various formats (csv, xml, etc) -- Acknowledgement: EU Funded FP6 Qualoss Project (see http://www.qualoss.eu).

THE tool for monitoring traceability between requirements and Java code. Create a traceability matrix using annotations. Report format: HTML.

JazzTeamEdu project contains Java educational sources provided by JazzTeam Open Source company. These sources are examples of usage of classes, investigations related to popular frameworks which are not formed as separate project yet.

Jistory is an Eclipse plug-in for history sensitive detection of design anomalies in source code. This plug-in aims to aid the developer in writing better code by using history sensitive heuristics to analyse multiple versions of source code.

Joern is a platform for analyzing source code, bytecode, and binary executables. It generates code property graphs (CPGs), a graph representation of code for cross-language code analysis. Code property graphs are stored in a custom graph database. This allows code to be mined using search queries formulated in a Scala-based domain-specific query language. Joern is developed with the goal of providing a useful tool for vulnerability discovery and research in static program analysis.

Justus is a tool set for Progress 4GL (ABL) Developers. It includes a simplified parser for 4GL, an API to load Profiler data and a Test Coverage Tool.

Kammerjäger is a debugging and testing tool that enables you to prove the correctness of your code. In our C like programming language named "SimPL" you can easily and simply annotate your code with preconditions and assertions (also with forall and exists expressions). We then use Microsofts Z3 theorem prover to prove if the behaviour of your program matches what you expected. The easy to use GUI with an integrated Interpreter and Debugger (with a Stackview and HotCodeReplacement) makes it even easier to write your code and find errors. This project has been developed during a University project called PSE ("Praxis der Softwareentwicklung" / "practical experience in software developement") at the Karlsruhe Institute of Technology (KIT) by Andreas Eberle, Nicolas Loza, Olga Plisovskaya, Andreas Waidler and Michael Zangl. Other Projects and pages of the team's members: www.settlers-android-clone.com (by Andreas Eberle and Michael Zangl) www.andreas-eberle.com

Larastan was created by Can Vural and Nuno Maduro, got artwork designed by @Caneco, is maintained by Can Vural, Nuno Maduro, and Viktor Szépe, and is a PHPStan wrapper for Laravel. Larastan focuses on finding errors in your code. It catches whole classes of bugs even before you write tests for the code.

Turn your ES5 code into readable ES6. Lebab does the opposite of what Babel does. Lebab transpiles your ES5 code to ES6/ES7. It does exactly the opposite of what Babel does. Convert your old-fashioned code using the lebab cli tool, enabling a specific transformation. The recommended way of using Lebab is to apply one transform at a time, read what exactly the transform does and what are its limitations, apply it to your code and inspect the diff carefully. Transforms can be applied with relatively high confidence. They use pretty straightforward and strict rules for changing the code. The resulting code should be almost 100% equivalent to the original code. Transforms should be applied with caution. They either use heuristics that can't guarantee that the resulting code is equivalent of the original code, or they have significant bugs which can result in breaking your code.

Luacheck is a static analyzer and a linter for Lua. Luacheck detects various issues such as usage of undefined global variables, unused variables and values, accessing uninitialized variables, unreachable code and more. Most aspects of checking are configurable: there are options for defining custom project-related globals, for selecting set of standard globals (version of Lua standard library), for filtering warnings by type and name of related variable, etc. The options can be used on the command line, put into a config or directly into checked files as Lua comments. Luacheck supports checking Lua files using the syntax of Lua 5.1, Lua 5.2, Lua 5.3, and LuaJIT. Luacheck itself is written in Lua and runs on all of the mentioned Lua versions.

$. What it does? When we design our own Java classes, we often depend on the 3rd party Java classes. Sometimes, we need to clarify the relationship among those 3rd party Java classes. And Aspect by AspectJ can shed light on our way. This project is the template for the Aspect by AspectJ. By the pointcut for the method call, we can trace back'who calls it. The word 'who' in this context is: Which method of which class For instance ... By the pointcut for: com.thirdparty.Foo.bar() we can trace: Which method of which class calls: com.thirdparty.Foo.bar() $. Requirements This project depends on: AspectJ Ant

The project has been moved to https://github.com/metrixplusplus/metrixplusplus ______________________ Metrix++ is an extendable tool to collect and analyse code metrics. - Multiple languages supported - Multiple metrics available - Configurable. Every metric has got 'turn-on' and other configuration options. There are no predefined thresholds for metrics or rules. You can choose and configure any limit you want. - High-performance. Processes thousands of files per minutes. - Seamless application to legacy code due to embedded capability to differentiate new code, modified and legacy.

Short for "Metamodel On A Runtime", MoarVM is a modern virtual machine built for the Rakudo Perl 6 compiler and the NQP Compiler Toolchain. MoarVM is used by the majority of Perl 6 programmers. Highlights include: Great Unicode support, with strings represented at grapheme level, dynamic analysis of running code to identify hot functions and loops, and perform a range of optimizations, including type specialization and inlining, support for threads, a range of concurrency control constructs, and asynchronous sockets, timers, processes, and more, generational, parallel, garbage collection, support for numerous language features, including first class functions, exceptions, continuations, runtime loading of code, big integers and interfacing with native libraries. MoarVM provides very little directly - and that's a good thing. It is not tied to a particular way of doing inheritance, roles, mixins, method resolution, type-checking, and so forth.

This is a plugin for Resharper that adds intellisense for the NMock2 mocking framework to Visual Studio.

NPEDetector is a tool for statically detecting the dereferences in Java programs that are safe and those that could potentially result in NullPointerException. Designed to be a sound verifi er, NPEDetector guarantees the safety of proven dereferences but could imprecisely flag safe dereferences as faulty. NPEDetector is built using WALA, Watson Libraries For Analysis.

"No comment!" is a command-line tool that generates various comment-related metrics for source code files (e. g. comment density, blank lines per file)

Ohcount is the source code line counter that powers Ohloh. Ohcount supports over 70 programming languages. Ohcount can also detect popular open source licenses such as GPL determine if code targets a particular programming API, such as Win32 or KDE.

This tool is an dependency management focused on sw-dev. It tracks source-code from software, and checks the object-dependencies and relations. The differences in two snapshots can show the need for further implementation- or testing-acitvities.

AnalysesOracle Performance Doctor is a tool which helps you to understand the behavior of your application on Oracle database level. The tool does: 1. Extract execution plan for all SQL’s executed by specified db user and print it to file on server side. 2. For all executed SQL statements the tool will provide more performance version of sql text by using built-in module dbms_sqltune.

PHP_Depend is an adaptation of the established Java development tool JDepend. This tool shows you the quality of your design in terms of extensibility, reusability and maintainability. The maintainers of PHP Depend and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use.

PHP Parser analyses PHP scripts including all included files and checks whether variables, constants, functions and classes are both used and defined. The script displays either only errors, a complete data list or the fully annotated script.